Application Security Engineer

<div class="content-intro"><p class="hero_p" data-w-id="694f4a7e-1669-d6d6-f8b3-0f8400d2c4cf">BrainRocket is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing.&nbsp;‍Young, ambitious, and unstoppable, we've already taken Cyprus, Malta, Portugal, Poland, and Serbia by storm.&nbsp;Our BRO team consists of 1,300 bright minds creating innovative ideas and products.&nbsp;We don’t follow formats. We shape them. We build what works, launch it fast, and make sure it hits.</p></div><p>We invite&nbsp;<strong>a Senior Application Security Engineer </strong>to join our team <strong>on-site</strong>.</p> <p><strong><span style="text-decoration: underline;">This is a 100% office-based role – no remote or hybrid options – at one of our hubs:<br></span></strong></p> <ul> <li><em>Belgrade (Serbia),</em></li> <li><em>Lisbon (Portugal),</em></li> <li><em>Sofia (Bulgaria),</em></li> <li><em>Warsaw (Poland),</em></li> <li><em>Yerevan (Armenia).</em></li> </ul> <p><span style="text-decoration: underline;">The final location will depend on business needs and the feasibility of relocation from your current spot.<br>We provide relocation support.</span></p> <p>✅&nbsp;<strong>Responsibilities:<br></strong>✔️ Demonstrated ability to collaborate with other teams to achieve complex objectives.<br>✔️ Responsible for security architecture design from cloud infrastructure to application through the implementation of "secure by design" principles.<br>✔️ Collaborate with product managers, architects, and developers on the implementation of the security controls platform ecosystem and products.<br>✔️ Proof security implementations within infrastructure and application deployment manifests and the CI/CD pipelines.<br>✔️ Define required policies, controls, and capabilities for the protection of products and environments.<br>✔️ Build and validate declarative threat models automation.<br>✔️ Participate in engineering teams’ product planning cycles and committees.<br>✔️ Oversee the product security aspects for migration of products and services from Data Center to public cloud, e.g., AWS.<br>✔️ Serve as a trusted cyber security advisor to product and application teams.</p> <p>✅ <strong>Minimum Requirements:</strong><br>✔️ Experience integrating security scanning/tooling into the development pipeline.<br>✔️ Experience in analysing and securing microservices and applications developed using JavaScript and Typescript.<br>✔️ Experience with CI/CD pipelines (such as Gitlab, Jenkins) and infrastructure-as-a-code models (such as Terraform, Helm, or CloudFormation).<br>✔️ Hands-on development experience in Python/shell scripting.<br>✔️ Strong understanding of supply chain security, software integrity, and secure software delivery.<br>✔️ Experience with Docker and mesh technologies (such as ISTIO).<br>✔️ Experience with architecture and security reviews, threat modelling, and application risk is highly desired.<br>✔️ Experience working with Agile methodologies.<br>✔️ Knowledge of privacy laws and regulations, such as GDPR desired.<br>✔️ Familiarity with industry regulations, frameworks, and practices. For example, PCI, ISO 27001, NIST, etc.</p> <p>✅ <strong>PREFERRED QUALIFICATIONS:</strong><br>✔️ In-depth experience with architecting secure services on Kubernetes.<br>✔️ Extensive experience with architecting secure services on AWS or on-prem data centers.<br>✔️ Security-related professional certifications e.g., CISSP, CISM, CCSK, CCSP, CEH, are highly desirable.</p> <p>✅ <strong>We offer excellent benefits, including but not limited to:</strong><br>💻&nbsp;Learning and development opportunities and interesting, challenging tasks.<br>✈️ Relocation package (tickets, staying in a hotel for up to 2 weeks, and visa relocation support for our employees and their family members).<br>📚 Opportunity to develop language skills, with partial compensation for the cost of English and Portuguese language classes (for localization purposes).&nbsp;<br>🎾 Partial compensation for tennis and padel lessons.&nbsp;<br>🏀 Urban Sport membership benefit (the most diverse sports and wellness offering in Europe, with more than 50+ activities).&nbsp;<br>🏥 Private medical coverage, including inpatient, outpatient, dental care, annual check-ups, and maternity support.&nbsp;<br>🏝 Time for proper rest, with 24 non-business days per year and an additional 6 paid sick days.&nbsp;<br>🚌 Transport compensation - 200 euros net per month.&nbsp;<br>📈 Competitive remuneration level with annual review.&nbsp;<br>🤝 Teambuilding activities.&nbsp;</p><div class="content-conclusion"><p>Bold moves start here. Make yours. Apply today!&nbsp;</p> <p><strong>By submitting your application, you agree to our <a href="https://www.brainrocket.com/privacy-policy" target="_blank">Privacy Policy.</a></strong></p></div>