Director, Solution Security

Brightstar Lottery; Warszawa; Hybrid; PLN 400,000 - 650,000; Full time

Job summary

Brightstar Lottery seeks a Director of Solution Security to lead the Application Security team across the enterprise. You will build and manage a high-performing group focused on securing applications, embedding security into the SDLC, and driving secure coding and vulnerability management.

The role requires extensive experience in application security strategy, offensive security, and governance, with a track record of influencing across engineering, DevOps, and product teams.

Qualifications

• Bachelor's degree; an advanced degree is preferred.
• 15 years of work experience; 12 years of related experience is required.

Responsibilities

• Build and lead a team of application security engineers and analysts.
• Foster a culture of innovation, accountability, and continuous learning.
• Define team goals, KPIs, and career development plans.
• Develop and execute an application security strategy aligned with risk management goals.
• Collaborate with software engineering, DevOps, and product teams to integrate security into the SDLC.
• Lead the development and implementation of secure coding standards and training for developers.
• Drive the adoption of DevSecOps practices and tools.
• Oversee application security testing (SAST, DAST, IAST, manual reviews).
• Manage intake, triage, remediation of vulnerabilities.
• Develop offensive security/red-teaming capabilities and oversee penetration testing.
• Ensure governance and regulatory compliance (PCI-DSS, GDPR, NIS2).
• Select and manage application security tools and drive automation of testing and vulnerability tracking.
• Lead threat modeling exercises for critical applications.

Skills

Leading Complexity

Leading People

Leading the Business

Leading Self

Education

Bachelor's degree; an advanced degree preferred

Job description

Select how often (in days) to receive an alert: Create Alert

Brightstar is an innovative, forward-thinking global leader in lottery that builds on our renowned expertise in delivering secure technology and producing reliable, comprehensive solutions for our customers. As a premier pure play global lottery company, our best-in-class lottery operations, retail and digital solutions, and award-winning lottery games enable our customers to achieve their goals, fulfill player needs and distribute meaningful benefits to communities. Brightstar has a well-established local presence and is a trusted partner to governments and regulators around the world, creating value by adhering to the highest standards of service, integrity, and responsibility. Brightstar has approximately 6,000 employees. For more information, please visit www.brightstarlottery.com .

Brightstar is an innovative, forward-thinking global leader in lottery that builds on our renowned expertise in delivering secure technology and producing reliable, comprehensive solutions for our customers. As a premier pure play global lottery company, our best-in-class lottery operations, retail and digital solutions, and award-winning lottery games enable our customers to achieve their goals, fulfill player needs and distribute meaningful benefits to communities. Brightstar has a well-established local presence and is a trusted partner to governments and regulators around the world, creating value by adhering to the highest standards of service, integrity, and responsibility.

Short Description

The Director Solution Security will lead the strategy, development, and operations of the Application Security team. This role is responsible for building and managing a high-performing team focused on securing applications across the enterprise, embedding security into the software development lifecycle (SDLC), and driving continuous improvement in secure coding practices and vulnerability management

Responsibilities

• Build and lead a team of application security engineers and analysts.
• Foster a culture of innovation, accountability, and continuous learning.
• Define team goals, KPIs, and career development plans.

Application Security Strategy

• Develop and execute a comprehensive application security strategy aligned with enterprise risk management goals.
• Collaborate with software engineering, DevOps, and product teams to integrate security into the SDLC.

Secure Development Practices

• Lead the development and implementation of secure coding standards and training to development teams.
• Drive the adoption of DevSecOps practices and tools.

Vulnerability Management

• Oversee application security testing including SAST, DAST, IAST, and manual code reviews.
• Manage the intake, triage, and remediation of application vulnerabilities.

Offensive Security Management

• Develop offensive security / red teaming capabilities, team, and processes and oversee execution of penetration testing activities

Governance & Compliance

• Ensure compliance with internal policies and external regulations (e.g., PCI-DSS, GDPR, MUSL, NIS2).
• Maintain documentation and reporting for audits and executive reviews.

Tooling & Automation

• Select and manage application security tools and platforms.
• Drive automation of security testing and vulnerability tracking.
• Lead threat modeling exercises for critical applications.
• Provide risk-based guidance to development teams and business stakeholders.

Scope

Complexity: Functions Responsible for or Influenced:High – Influence on Information Security across the organization

Diversity: Locations Responsible for or Influenced:High - Influence on enterprise

Typical Job Problems and Difficulties

• Ensuring alignment of multiple stakeholders and development teams Interfacing with customers as needed to discuss mitigating control options
• Driving standardization across the enterprise

Qualifications

Education

• Bachelor's degree; an advanced degree is preferred.

Experience

• 15 years of work experience; 12 years of related experience is required.

Keys to Success

• Leading Complexity
• Leading People
• Leading the Business
• Leading Self

Brightstar is committed to sustaining a workforce that reflects the diversity of the global customers and communities we serve, and to creating a fair and inclusive culture that enables all our employees to feel valued, respected and engaged.Brightstar is an equal opportunity employer. We provide equal opportunities without regard to race, color, religion, gender, sexual orientation, gender identity, gender expression, pregnancy, marital status, national origin, citizenship, covered veteran status, ancestry, age, physical or mental disability, medical condition, genetic information, or any other legally protected status in accordance with applicable local, state, federal laws or other laws. We thank all applicants for applying; however, only those selected to interview will be contacted.

All Brightstar employees have a role in information security. Annual training will be assigned and required as appropriate.