Senior Application Security Engineer

DOU; Wrocław; On-site; PLN 180,000 - 260,000; Full time

Benefits offered by this job

Annual leave

Private medical cover

Private medical insurance

Learning Hub

Gym & fitness membership

Multisport membership

Job summary

ARRISE is seeking a Senior Application Security Engineer to act as a technical authority for secure design, development, deployment, and integrity across on-prem and SaaS environments. You will thrive in a fast-paced, collaborative setting and wear multiple hats.

You will define and mature secure SDLC, embed secure coding practices, lead threat modeling, and implement security testing in CI/CD. Strong background in web/API security and penetration testing is required.

Qualifications

• 5+ years in application security, secure architecture, or related functions.
• Proven ability to influence senior engineering and product leadership.
• Proven implementation of CI/CD security automation and secure coding practices.
• Strong understanding of web, API, and microservice security.
• Experience with Java, JavaScript.
• Experience in Penetration Testing.

Responsibilities

• Define and mature secure SDLC and AppSec program frameworks.
• Embed secure coding practices into development and backend platform engineering.
• Lead threat modeling and high-risk security reviews for major releases.
• Implement application security testing tools (e.g. SCA, SAST/DAST), container scanning, and secrets detection in CI/CD pipelines.
• Perform penetration testing and manage external testing efforts.
• Manage application vulnerabilities from identification to remediation.
• Provide guidance for development teams.
• Design and enforce organization-wide paved roads and guardrails.

Skills

Application security

Secure architecture

CI/CD security automation

Web security

API security

Penetration testing

Java

JavaScript

Kubernetes security

Tools

CI/CD tools

SAST/DAST tools

Job description

About us

ARRISE is a global leader in software development and services for the iGaming industry, bringing together more than 2,500 professionals operating across more than 12 locations worldwide.

From concept through to delivery, we combine technical expertise, creativity and industry knowledge to develop products, platforms and services that shape player experiences and support some of the industry's leading brands.

We are best known for the work we deliver for Pragmatic Play, creating and supporting technology, products and specialists services enjoyed by millions of players worldwide.

About the role

The Senior Application Security Engineer acts as a technical authority. This role ensures secure design, development, deployment, and integrity across both on-prem and SaaS environments. You should be comfortable wearing multiple hats and thrive in a fast-paced, collaborative environment.

What you will do

• Define and mature secure SDLC and AppSec program frameworks.
• Embed secure coding practices into development and backend platform engineering.
• Lead threat modeling and high-risk security reviews for major releases.
• Implement application security testing tools (e.g. SCA, ASPM), container scanning, and secrets detection in CI/CD pipelines.
• Perform Penetration Testing and manage external penetration testing efforts
• Manage application vulnerabilities from identification to remediation.
• Provide guidance for development teams.
• Design, maintain, and enforce organization-wide paved roads and guardrails.

What you bring

• 5+ years in application security, secure architecture, or related functions.
• Demonstrated ability to influence senior engineering and product leadership.
• Proven implementation of CI/CD security automation and secure coding practices.
• Strong understanding of web, API, and microservice security.
• Experience with Java, Javascript.
• Experience in Penetration Testing

What sets you apart

• Kubernetes/container security knowledge.

What we offer

• Competitive compensation
• A competitive salary that reflects your skills and experience.
• Annual leave
• In accordance with the applicable legislation (20 or 26 days of annual leave).
• Private medical cover
• Private medical insurance to help you look after your health and wellbeing, available after successfully passing the probation period.
• Learning Hub
• Access to our online learning platform, with courses and resources to help you build your skills and grow your career.
• Gym & fitness membership
• Multisport membership, after successfully passing probation.