Senior Application Security Engineer

LeoVegas Mobile Gaming Group

Stockholms kommun

Hybrid

SEK 1,100,000 - 1,500,000

Full time

14 days+
Application generator

An application made for this job — a tailored resume and cover letter that speak straight to the posting.

Get past ATS filters

Benefits offered by this job

Hybrid work policy
Workation benefit (4 weeks)
30 vacation days
Occupational Pension
Wellness contribution 5000 SEK
Parental Leave Top-Up
Private health care insurance option
Equipment allowance 1500 SEK
Benify benefits portal

Job summary

LeoVegas Mobile Gaming Group is seeking a hands-on Senior Application Security Engineer to join as a founding member of the security team. You will secure consumer‑facing platforms and cloud infrastructure, balancing compliance with the agility required to grow.

You will be responsible for embedding security across the lifecycle, driving auditing of web and native apps, hardening APIs, and protecting the perimeter with WAF and DDoS measures.

Qualifications

  • Strong background in securing high-risk consumer platforms across web and mobile.
  • Ability to read and audit code in modern languages and use automated security tools.
  • Foundational networking knowledge including TCP/IP, DNS, HTTP/S, TLS.
  • Working knowledge of cloud security, Kubernetes, and microservices at scale.
  • Experience in regulated industries like iGaming, Fintech, or healthcare.
  • Scripting to automate security workflows (Python or similar).

Responsibilities

  • Embed security into the Software Development Lifecycle from design to release and advocate secure-by-default.
  • Drive security testing and code review across web and mobile apps.
  • Harden APIs with emphasis on authorization and abuse prevention.
  • Manage and tune WAF and DDoS mitigation to ensure availability as a core metric.
  • Harden cloud infrastructure and secure cloud-native architectures.
  • Automate security checks across pipelines and environments.
  • Support regulatory and ISO certifications with technical guidance.
  • Collaborate with engineering and product teams to balance risk and innovation.
  • Partner with external vendors and managed security providers to maximise value.

Skills

AppSec Expertise
Code review
Networking fundamentals
Cloud security
Regulated industries
Python scripting
Communication skills
Vendor management

Tools

Kubernetes

Job description

ABOUT THE ROLE

We are looking for a hands‑on Senior Application Security Engineer to become a founding member of our security team. You will be joining a highly regulated iGaming environment where uptime, data integrity, and user trust are paramount.

You will shape the security of our consumer‑facing platforms and of the cloud infrastructure they run on, balancing compliance requirements with the agility our business needs to grow.

Why Join Us?
  • Impact: Be a founding member of the security team, helping shape our application security practice and tooling from the ground up.
  • High‑Stakes Challenge: Work in an environment where security directly affects user trust, real‑time operations, and the bottom line.
YOU WILL BE RESPONSIBLE FOR:
  • Secure the Development Lifecycle: Embed security into every stage of how we build software, from threat modeling at design time to security review before release. Partner with engineering to make secure‑by‑default the path of least resistance.
  • Audit Web & Native Applications: Drive and run security testing and code review across our web and mobile apps.
  • Protect the API Surface: Review and harden the APIs powering our platforms with focus on authorization and abuse prevention.
  • Defend the Perimeter: Manage and tune our WAF and DDoS mitigation. You understand that in our industry, availability is revenue.
  • Secure Cloud Infrastructure: Help harden our cloud environment where it matters most for application security.
  • Automation & Scripting: Automate security checks, reduce manual toil and ensure consistent controls across our pipelines and environments.
  • Compliance Support: Act as the technical bridge for regulatory and ISO certifications.
  • Business Partnership: Work closely with engineering and product teams. You will champion a "Security by Design" culture, helping stakeholders understand risk without acting as a blocker to innovation.
  • Strategic partnership: Driving our collaboration with Google to architect the future of our AI workflows and security frameworks.
OUR SUCCESSFUL CANDIDATE WILL HAVE THE FOLLOWING:
  • AppSec Specialist: You have a strong background in securing high‑scale, consumer‑facing applications across mobile and web. You know the OWASP Top 10 cold and have opinions about what it leaves out.
  • Code Reviewer: You can read and audit code in modern high‑level languages and use automated tools.
  • Networking Native: You have a deep, foundational understanding of networking protocols (TCP/IP, DNS, HTTP/S, TLS). You aren't just a cloud user; you understand how packets move and how to secure them at the protocol level.
  • Cloud‑Comfortable: You have working knowledge of cloud security, Kubernetes, and the trade‑offs of running microservices at scale.
  • Regulated Background: You have thrived in industries with strict compliance requirements (iGaming, Fintech or Healthcare) and understand the rigor required.
  • Scripting Skills: You automate security workflows with Python or similar.
  • Pragmatic Communicator: You weigh business goals against security risk and can explain to non‑technical stakeholders why a control matters.
  • Provider Management: Experience evaluating, onboarding, and managing external security vendors or managed service providers. You know how to get real value out of third‑party partners.
WHO WE ARE

At the core of LeoVegas Group is Team Leo. Our culture is our foundation and is what enables us to innovate, build and lead as we trailblaze our way through the iGaming industry. We’re a team of over 2000 innovators, initiators and groundbreakers working in a fast‑paced and agile environment across 19 offices worldwide.

BENEFITS
  • Hybrid work policy
  • 4 weeks of Workation (T&C apply)
  • 30 annual vacation days
  • Occupational Pension
  • 5,000 SEK wellness contribution annually
  • Parental Leave Top‑Up
  • Possibility to enrol in a private health care insurance for both you and your partner
  • 1,500 SEK equipment allowance
  • Benify – benefits portal with many offers and discounts
Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

Senior Application Security Engineer
Senior Application Security Engineer

LeoVegas Mobile Gaming Group • Växjö kommun

Hybrid
SEK 1,000,000 - 1,400,000
Hybrid work policy
Workation
30 vacation days
+6
Compliance Manager – Nordics
Compliance Manager – Nordics

LeoVegas Group • Stockholms kommun

Hybrid
SEK 993,000 - 1,325,000
Hybrid work policy
Workation (4 weeks)
30 annual vacation days
+6
Senior Backend Engineer - Sports
Senior Backend Engineer - Sports

LeoVegas Mobile Gaming Group • Stockholms kommun

Hybrid
SEK 900,000 - 1,200,000
Hybrid work policy
4 weeks Workation
30 vacation days per year
+6
Senior JavaScript Engineer - Gaming
Senior JavaScript Engineer - Gaming

LeoVegas • Stockholms kommun

Hybrid
SEK 900,000 - 1,300,000
Hybrid work policy
4 weeks of Workation (T&C apply)
30 annual vacation days
+6
AI Enablement Engineer
AI Enablement Engineer

LeoVegas Group • Stockholms kommun

Hybrid
SEK 1,200,000 - 1,900,000
Hybrid work policy
Workation 4 weeks
30 annual vacation days
+6
Senior Project Manager
Senior Project Manager

LeoVegas Mobile Gaming Group • Stockholms kommun

Hybrid
SEK 900,000 - 1,200,000
Hybrid work policy
Workation
30 annual vacation days
+6
Senior JavaScript Engineer - Gaming
Senior JavaScript Engineer - Gaming

LeoVegas Group • Stockholms kommun

Hybrid
SEK 900,000 - 1,300,000
Hybrid work policy
4 weeks of Workation (T&C apply)
30 annual vacation days
+6
Engineering Manager
Engineering Manager

Gears of Leo AB • Stockholms kommun

Hybrid
SEK 900,000 - 1,200,000
Competitive basic salary
Health care insurance
30 annual vacation days
+2
Senior Javascript Engineer - Core Experience
Senior Javascript Engineer - Core Experience

LeoVegas • Stockholms kommun

Hybrid
SEK 700,000 - 900,000
Hybrid work policy
4 weeks of Workation (T&C apply)
30 annual vacation days
+6
Senior Backend Engineer - Payments Domain
Senior Backend Engineer - Payments Domain

LeoVegas Group • Växjö kommun

Hybrid
SEK 900,000 - 1,100,000
Hybrid work policy
Workation 4 weeks
30 annual vacation days
+6