Application Security Architect

ARRISE powering Pragmatic Play; Ras Al Khaimah; On-site; USD 80,000 - 120,000; Full time

Job summary

Join a forward-thinking company at the forefront of the iGaming industry as an Application Security Architect. In this pivotal role, you will lead the charge in integrating security best practices into the software development lifecycle, ensuring that applications meet the highest security standards. Collaborate with talented development teams to identify and mitigate risks while fostering a security-first mindset across the organization. With opportunities for personal and professional growth, this position offers a chance to make a significant impact in a dynamic and innovative environment. If you're passionate about security and eager to shape the future of application security, this is the role for you!

Benefits

Private health insurance

25 days of annual leave

Visa application support (company-covered)

Professional development opportunities

Career progression within a dynamic team

Qualifications

• 10+ years in cybersecurity focusing on application security.
• Proven experience in secure software development and threat modeling.

Responsibilities

• Develop and implement an application security strategy aligned with business goals.
• Collaborate with development teams to embed security into every phase of the SDLC.

Skills

Application Security

Threat Modeling

Penetration Testing

Security Risk Management

Secure Coding Practices

Incident Response

Education

Bachelor's Degree in Computer Science or related field

Tools

SAST

DAST

SCA

Job description

About us:

ARRISE sets the benchmark for service delivery and excellence in the iGaming industry. Playing a key role in the success of its clients, including Pragmatic Play, ARRISE helps deliver exceptional gaming experiences to millions of players worldwide.

Our global team of over 6,000 professionals is shaping the future of iGaming. Headquartered in Gibraltar, with offices across Canada, India, the Isle of Man, Latvia, Malta, Romania, Serbia, Bulgaria, and the UAE, we are expanding into new exciting destinations.

At ARRISE, we foster growth opportunities at all levels, invest in our people, and build strategic partnerships to open new avenues for success. Success is a collective effort driven by ambition, collaboration, and a shared commitment to growth.

Join the future of iGaming with 6,000 ARRISERS! If a job excites you, apply now and connect with our friendly recruitment team. Your journey starts here!

About The Role:

The Application Security Architect will work closely with development teams to integrate security best practices into the software development lifecycle (SDLC). You will lead the design, implementation, and review of secure software architectures, identify and mitigate risks, and ensure applications meet high-security standards. Staying ahead of emerging threats and providing thought leadership to foster a security-first mindset across the organization are key aspects of this role.

Key Responsibilities:

1. Application Security Strategy: Develop and implement an application security strategy aligned with business goals, risk profiles, and regulatory requirements.
2. Secure Software Development Lifecycle (SDLC): Collaborate with development teams to embed security into every phase of the SDLC, including secure coding, threat modeling, and design principles.
3. Security Risk Management: Identify, evaluate, and mitigate security risks through threat modeling and vulnerability assessments.
4. Security Assessments & Testing: Conduct code reviews, penetration tests, vulnerability assessments, and risk analyses to identify and fix security issues.
5. Tooling and Automation: Recommend, implement, and manage security tools such as SAST, DAST, SCA, and automation practices to detect vulnerabilities early.
6. Cross-Functional Collaboration: Work with software developers, infrastructure teams, and product owners to ensure secure application delivery.
7. Compliance and Standards: Ensure applications comply with industry standards and regulations like GDPR, HIPAA, PCI-DSS, and follow best practices like OWASP Top 10.
8. Incident Response: Participate in detecting, analyzing, and resolving security incidents related to application vulnerabilities.
9. Security Awareness and Training: Develop and deliver training on secure coding, application security, and emerging threats.
10. Documentation: Maintain records of security policies, procedures, and controls related to application security.

Experience:

1. 10+ years in cybersecurity, focusing on application security.
2. Proven experience in secure software development, threat modeling, penetration testing, and security risk management.
3. Strong familiarity with common application security tools.
4. Experience with cloud platforms (AWS, Azure, GCP) and securing cloud applications is a plus.
5. Deep knowledge of application security concepts, OWASP Top 10, and secure coding practices.
6. Familiarity with common programming languages.
7. Strong understanding of web architecture, APIs, and microservices.
8. Hands-on experience with security testing tools and automation.
9. Experience with threat modeling and risk assessment frameworks.

What We Offer:

• Opportunity to craft immersive experiences and responsible gaming thrills, with a dedicated team delivering services players love.
• Professional and personal development opportunities.
• Career progression within a dynamic team.
• Collaborative colleagues.
• Private health insurance.
• 25 days of annual leave.
• Visa application support (company-covered).