Senior AppSec Engineer — Secure SDLC & PenTesting Lead

DOU Polska; Wrocław; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Competitive compensation

Private medical cover

Private medical insurance after-probab

Annual leave

Learning Hub

Gym & fitness membership

Multisport membership after probation

Job summary

ARRISE is a global software leader delivering secure software development and services for the iGaming industry. We seek a Senior Application Security Engineer to act as a technical authority, ensuring secure design, development, deployment, and integrity across on-prem and SaaS environments.

You will drive secure SDLC programs, lead threat modeling and high-risk security reviews, and embed secure coding practices across development and backend engineering teams.

Qualifications

• 5+ years in application security, secure architecture, or related functions.
• Ability to influence senior engineering and product leadership.
• Proven implementation of CI/CD security automation and secure coding practices.
• Strong understanding of web, API, and microservice security.
• Experience with Java, Javascript.
• Experience in Penetration Testing.

Responsibilities

• Define and mature secure SDLC and AppSec program frameworks.
• Embed secure coding practices into development and backend platform engineering.
• Lead threat modeling and high-risk security reviews for major releases.
• Implement application security testing tools (e.g. SCA, ASPM), container scanning, and secrets detection in CI/CD pipelines.
• Perform Penetration Testing and manage external penetration testing efforts
• Manage application vulnerabilities from identification to remediation.
• Provide guidance for development teams.
• Design, maintain, and enforce organization-wide paved roads and guardrails.

Skills

Security engineering

CI/CD security automation

Secure coding practices

Web/API security

Java

JavaScript

Penetration Testing

Kubernetes security

Job description

ARRISE is a global software leader delivering secure software development and services for the iGaming industry. We seek a Senior Application Security Engineer to act as a technical authority, ensuring secure design, development, deployment, and integrity across on-prem and SaaS environments.

You will drive secure SDLC programs, lead threat modeling and high-risk security reviews, and embed secure coding practices across development and backend engineering teams.