Principal Product Security Engineer — Secure Apps

hardrockdigital; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid / remote working environment

Competitive compensation

Job summary

Hard Rock Digital is seeking a Principal Product Security Engineer to own security from code to production for our sportsbook and casino platforms. You’ll implement secure SDLC patterns, lead threat modeling, and drive vulnerability management across code, dependencies, and containers in a highly regulated gaming environment.

You’ll collaborate with product and engineering teams, align with NIST and industry standards, and mentor others while reporting to the VP Security.

Qualifications

• 10+ years in application or product security with hands-on expertise.
• Strong command of the AppSec toolchain (SAST, SCA) and secure code reviews.
• Experience with CI/CD pipelines and cloud-native security (AWS).
• Excellent communication and ability to drive risk-based decisions.

Responsibilities

• Define secure SDLC patterns and guardrails for fast, safe shipping.
• Lead threat modeling and design reviews for new features and payments.
• Own vulnerability lifecycle across code, dependencies, and containers.
• Coordinate testing and remediation with internal teams and external assessors.
• Report program health and compliance evidence to leadership.

Skills

AppSec

Threat modeling

Secure design

CI/CD

Cloud security

Tools

SAST

SCA

CI/CD tooling

WAF

Job description

Hard Rock Digital is seeking a Principal Product Security Engineer to own security from code to production for our sportsbook and casino platforms. You’ll implement secure SDLC patterns, lead threat modeling, and drive vulnerability management across code, dependencies, and containers in a highly regulated gaming environment.

You’ll collaborate with product and engineering teams, align with NIST and industry standards, and mentor others while reporting to the VP Security.