Security Engineer

Brightstar Lottery; Warszawa; Hybrid; PLN 145,000 - 223,000; Full time

Benefits offered by this job

Paid time off

Health insurance

Life insurance

Disability insurance

Volunteer programs

Well-being programs

Senior-level benefits

Job summary

Brightstar Lottery is seeking an Application Security Engineer to drive the strategy, implementation, and maturity of our application security program. You will lead integration of AppSec tooling into CI/CD pipelines, and oversee deployment of SAST, SCA, secrets management, IaC scanning, and DAST, while collaborating with product teams to embed secure coding practices and threat modeling.

In this role, you will partner with security, DevOps, and engineering leadership to scale security across

Qualifications

• 5–10 years of experience in Application Security or Secure Software Development.

Responsibilities

• Participate application security program, including policy enforcement and risk reporting.
• Own integration of AppSec tooling into CI/CD pipelines for scalable security controls.
• Oversee deployment and tuning of SAST, SCA, secrets management, IaC scanning, and DAST.
• Partner with product teams to embed secure coding, review threat models, triage vulnerabilities.
• Collaborate with GRC/compliance to align with OWASP, FedRAMP.
• Mentor AppSec engineers and promote a security-first culture.
• Evaluate IAST and runtime protections as part of continuous improvement.
• Develop KPIs to measure security posture and tooling efficacy.

Skills

AppSec leadership

CI/CD experience

Cloud security

Secure SDLC

Security tooling

Strong communication

Tools

Semgrep

Mend

GitHub Advanced Security

HCL AppScan

Tenable Web App Scanning

GitHub Actions

GitLab CI

Jenkins

Burp Suite

Kali Linux

IAST tooling

Job description

Brightstar is an innovative, forward-thinking global leader in lottery that builds on our renowned expertise in delivering secure technology and producing reliable, comprehensive solutions for our customers. As a premier pure play global lottery company, our best-in-class lottery operations, retail and digital solutions, and award-winning lottery games enable our customers to achieve their goals, fulfill player needs and distribute meaningful benefits to communities. We have a longstanding commitment to Responsible Gaming (RG) that is engrained within our core business and the products we offer to customers and players worldwide. Brightstar has a well-established local presence and is a trusted partner to governments and regulators around the world, creating value by adhering to the highest standards of service, integrity, and responsibility. Brightstar has approximately 6,000 employees. For more information, please visit www.brightstarlottery.com .

Role Overview

We are seeking an Application Security Engineer to drive the strategy, implementation, and maturity of our application security program.

This individual will lead initiatives across the secure software development lifecycle, integrating application security best practices and tooling into engineering workflows, and partnering closely with security, DevOps, and engineering leadership.

This is a high-impact role that requires technical depth, leadership capability, and a passion for scaling security across product teams.

Key Responsibilities

• Participate application security program, including tool selection, policy enforcement, developer engagement, and risk reporting.
• Own integration of AppSec tooling into CI/CD pipelines to enable scalable, developer-friendly security controls.
• Oversee deployment and tuning of tools for SAST, SCA, secrets management, IaC scanning, and DAST (e.g., Tenable Web App Scanning).
• Partner with product teams to embed secure coding practices, review threat models, and triage high-impact vulnerabilities.
• Collaborate with GRC/compliance teams to ensure alignment with relevant standards (e.g., OWASP, FedRAMP).
• Mentor and support other AppSec engineers and champion a security-first development culture.
• Evaluate IAST and runtime protections as part of continuous improvement efforts.
• Develop KPIs to measure security posture and tooling efficacy.

Required Qualifications

• 5–10 years of experience in Application Security or Secure Software Development.
• Proven experience leading application security programs in a CI/CD-heavy engineering environment.
• Deep expertise in securing cloud-native applications, and integrating AppSec tools such as Semgrep, Mend, GitHub Advanced Security, HCL AppScan, or equivalent.
• Hands-on experience with CI/CD integrations using GitHub Actions, GitLab CI, Jenkins, or similar.
• Strong communication and influencing skills; able to drive security adoption across diverse teams.
• Knowledge of DAST tools (e.g., Tenable Web App Scanning) and Pentest methodologies (Burp Suite, Kali Linux).
• Experience with security in modern SDLC environments using containers, microservices, and APIs.
• IAST experience is a plus.
• Leading Complexity
• Leading People
• Leading the Business
• Leading Self

#LI-JB1 #LI-Hybrid

This information reflects Brightstar Lottery’s good-faith estimate of compensation for this position at the time of publication. Actual compensation will be determined in accordance with the applicable collective agreement and internal compensation policies. Factors that we consider include, but are not limited to, role, career level, performance, skills, level of expertise, experience, location, market competitiveness, and internal equity. The estimated starting compensation range is 145,196 zł – 223,379 zł. The Company will comply with all local pay requirements and collective bargaining agreements, where applicable.

Other Benefits Offered:

• Paid time off
• Health insurance, life insurance, and disability insurance
• Opportunities to volunteer your time to company-driven initiatives, employee networks or organizations of your choice
• Variety of well-being programs
• Additional benefits available depending on the seniority of the role

This position is governed by collective bargaining agreement, which regulates the main terms and conditions of employment, including minimum salary levels, classification, working hours, leave, and other employment rights.

Our hiring process is conducted in line with principles of pay transparency and equal pay. We do not request or rely on candidates’ salary history during the selection process.

All Brightstar employees have a role in information security. Annual training will be assigned and required as appropriate.