Overview In this role you will embed security across the software lifecycle for consumer-facing platforms in a regulated iGaming setting. You will work with engineering and product teams to enable secure-by-default delivery while meeting compliance needs. You'll defend APIs, cloud infrastructure, and the development process, balancing risk with the need for agility.

You will also help shape security tooling and partner with Google on future AI security frameworks, playing a pivotal role in safeguarding uptime and user trust.

Compensaciones / Ventajas Hybrid work policy

Workation

Wellness contribution

Health insurance

Life insurance

Short Fridays

Responsabilidades Embed security into the end-to-end software development lifecycle and promote secure-by-default practices

Audit web and native applications through security testing and code reviews

Harden APIs with a focus on authorization and abuse prevention

Manage and tune the WAF and DDoS mitigation to protect availability

Strengthen cloud infrastructure security, including Kubernetes environments

Automate security checks across pipelines and environments





Support regulatory and ISO compliance efforts with technical guidance

Collaborate with engineering and product teams to foster a Security by Design culture

Partner with Google to shape AI security workflows and frameworks

Requisitos principales AppSec Specialist with experience securing high-scale consumer apps across mobile and web

Code reviewer capable of reading and auditing code and using automated tools

Networking native with solid understanding of TCP/IP, DNS, TLS

Cloud security familiarity, Kubernetes competence, microservices at scale

Experience in regulated industries (iGaming, Fintech or Healthcare)

Scripting skills with Python or similar

Pragmatic communicator able to explain security risks to non-technical stakeholders

Provider management experience with external security vendors or MSPs

Pragmatic communication

Collaboration

Business-minded risk assessment

OWASP Top 10

Code auditing and automated security tooling

Networking fundamentals (TCP/IP, DNS, TLS)

📌 Senior Application Security Engineer (Málaga)
🏢 LeoVegas
📍 Málaga