Director of Application Security & DevSecOps

Brightstar Lottery; Warszawa; Hybrid; PLN 400,000 - 650,000; Full time

Job summary

Brightstar Lottery seeks a Director of Solution Security to lead the Application Security team across the enterprise. You will build and manage a high-performing group focused on securing applications, embedding security into the SDLC, and driving secure coding and vulnerability management.

The role requires extensive experience in application security strategy, offensive security, and governance, with a track record of influencing across engineering, DevOps, and product teams.

Qualifications

• Bachelor's degree; an advanced degree is preferred.
• 15 years of work experience; 12 years of related experience is required.

Responsibilities

• Build and lead a team of application security engineers and analysts.
• Foster a culture of innovation, accountability, and continuous learning.
• Define team goals, KPIs, and career development plans.
• Develop and execute an application security strategy aligned with risk management goals.
• Collaborate with software engineering, DevOps, and product teams to integrate security into the SDLC.
• Lead the development and implementation of secure coding standards and training for developers.
• Drive the adoption of DevSecOps practices and tools.
• Oversee application security testing (SAST, DAST, IAST, manual reviews).
• Manage intake, triage, remediation of vulnerabilities.
• Develop offensive security/red-teaming capabilities and oversee penetration testing.
• Ensure governance and regulatory compliance (PCI-DSS, GDPR, NIS2).
• Select and manage application security tools and drive automation of testing and vulnerability tracking.
• Lead threat modeling exercises for critical applications.

Skills

Leading Complexity

Leading People

Leading the Business

Leading Self

Education

Bachelor's degree; an advanced degree preferred

Job description

Brightstar Lottery seeks a Director of Solution Security to lead the Application Security team across the enterprise. You will build and manage a high-performing group focused on securing applications, embedding security into the SDLC, and driving secure coding and vulnerability management.

The role requires extensive experience in application security strategy, offensive security, and governance, with a track record of influencing across engineering, DevOps, and product teams.