Senior AppSec Engineer – CI/CD Security Leader (Hybrid)

Brightstar Lottery; Warszawa; Hybrid; PLN 145,000 - 223,000; Full time

Benefits offered by this job

Paid time off

Health insurance

Life insurance

Disability insurance

Volunteer programs

Well-being programs

Senior-level benefits

Job summary

Brightstar Lottery is seeking an Application Security Engineer to drive the strategy, implementation, and maturity of our application security program. You will lead integration of AppSec tooling into CI/CD pipelines, and oversee deployment of SAST, SCA, secrets management, IaC scanning, and DAST, while collaborating with product teams to embed secure coding practices and threat modeling.

In this role, you will partner with security, DevOps, and engineering leadership to scale security across

Qualifications

• 5–10 years of experience in Application Security or Secure Software Development.

Responsibilities

• Participate application security program, including policy enforcement and risk reporting.
• Own integration of AppSec tooling into CI/CD pipelines for scalable security controls.
• Oversee deployment and tuning of SAST, SCA, secrets management, IaC scanning, and DAST.
• Partner with product teams to embed secure coding, review threat models, triage vulnerabilities.
• Collaborate with GRC/compliance to align with OWASP, FedRAMP.
• Mentor AppSec engineers and promote a security-first culture.
• Evaluate IAST and runtime protections as part of continuous improvement.
• Develop KPIs to measure security posture and tooling efficacy.

Skills

AppSec leadership

CI/CD experience

Cloud security

Secure SDLC

Security tooling

Strong communication

Tools

Semgrep

Mend

GitHub Advanced Security

HCL AppScan

Tenable Web App Scanning

GitHub Actions

GitLab CI

Jenkins

Burp Suite

Kali Linux

IAST tooling

Job description

Brightstar Lottery is seeking an Application Security Engineer to drive the strategy, implementation, and maturity of our application security program. You will lead integration of AppSec tooling into CI/CD pipelines, and oversee deployment of SAST, SCA, secrets management, IaC scanning, and DAST, while collaborating with product teams to embed secure coding practices and threat modeling.

In this role, you will partner with security, DevOps, and engineering leadership to scale security across