Senior Application Security Engineer
Free to start · No card · 5 credits the moment you sign up
Job description
About the Role
Are you a cybersecurity champion who thrives on embedding "secure by design" principles into cutting-edge cloud infrastructure and microservices? We are looking for a Senior Application Security Engineer to act as a trusted advisor, driving the evolution of secure product engineering from legacy data centers to AWS. If you want to own threat modeling automation, champion supply chain security, and influence engineering roadmaps in a high-scale environment, this is your next big move.
About the Client
Our partner is a tech company building product engineering across Fintech, iGaming, and Marketing. They turn innovative ideas into high-performing engines and launch them at scale. As their exclusive recruitment partner, Lionhires manages their full-cycle talent acquisition, connecting top-tier tech talent with this fast-growing ecosystem.
What You Will Do
Design and implement robust security architecture spanning from cloud infrastructure down to the application layer, ensuring "secure by design" principles are met.
Collaborate closely with product managers, architects, and developers to build and scale the security controls platform ecosystem.
Validate and proof security implementations within infrastructure, application deployment manifests, and automated CI/CD pipelines.
Define critical policies, controls, and capabilities to protect global products and environments.
Build and automate declarative threat modeling to proactively identify and mitigate application risks.
Oversee the product security strategy for migrating legacy data center workloads to the public cloud (AWS).
Serve as a trusted cybersecurity advisor to engineering and product teams, participating actively in planning cycles and technical committees.
What You Bring
Microservices Security: Proven experience analyzing and securing applications developed using JavaScript and TypeScript.
DevSecOps Core: Hands-on experience integrating security scanning/tooling into CI/CD pipelines (GitLab, Jenkins) and utilizing Infrastructure-as-Code models (Terraform, Helm, or CloudFormation).
Scripting Skills: Strong development experience in Python and Shell scripting.
Modern Infrastructure: Deep familiarity with Docker and service mesh technologies (such as ISTIO).
Security Assessments: Strong background in architecture/security reviews, threat modeling, and application risk mitigation within an Agile framework.
Software Integrity: A rock-solid understanding of supply chain security, software integrity, and secure software delivery.
Compliance & Privacy: Familiarity with industry regulations and frameworks (PCI-DSS, ISO 27001, NIST) and privacy laws like GDPR.
Bonus Points: In-depth experience architecting secure services on Kubernetes/AWS and holding industry certifications (e.g., CISSP, CISM, CCSK, CCSP, CEH).
What's in It for You
- True Ownership: You will have the autonomy to influence our security roadmap and make architectural decisions that protect our production environments.
- Impactful Work: Your work directly safeguards real-money flows and critical financial data, making a tangible difference in the security of our users.
- Collaborative Culture: Join a cross-functional team of experts in engineering, fraud, and payments who value security and knowledge sharing.
- Continuous Growth: We invest in your professional development through support for advanced certifications, conference attendance, and research time.
- Competitive Benefits: We offer a comprehensive benefits package, including competitive compensation, health coverage, and flexible working arrangements.
Originally posted on Himalayas
Prepare your application
Use the description above to assess your fit for LionHires. This checklist is guidance from Resumize, rather than additional requirements from the employer. Imported listings can be shortened or change after collection, so confirm the complete description and current availability before sending an application.
Match requirements to evidence
Identify the responsibilities and skills the employer explicitly names. For each important requirement, choose one example from your work, education, training, or projects. Explain what you did, how you did it, and what changed as a result. Include a measurable outcome when you can support it. If you lack a requirement, describe related experience accurately instead of adding an unfamiliar skill to your resume.
Put the most relevant examples near the top of your resume. Keep job titles, dates, qualifications, and contact details consistent across your application materials. Use the employer’s terminology when it describes your experience accurately; a copied list of keywords does not explain your contribution. A short, specific bullet is easier to review than a paragraph that mixes several unrelated duties.
Check the working arrangement
Confirm the location, schedule, employment type, and any eligibility requirements on the employer’s site. A remote label does not establish worldwide eligibility or flexible hours. If compensation, benefits, equipment, travel, or contract duration are missing from this listing, write down your questions for the recruiter. Do not assume details from another opening at the same company apply to this role.
Review before submitting
Follow the employer’s requested file format and application instructions. Open your exported resume and check that its text is selectable, its sections read in order, and its links work. Proofread names, dates, and contact information. Share confidential work samples only when you have permission, and use an anonymized example when necessary.
Submit through a trusted employer or recruiting destination. If the original listing has disappeared, search the employer’s careers page for the title rather than assuming the vacancy remains open. Save the application date, job reference, and the version of your resume you sent. Those details help you prepare for a later conversation and avoid submitting conflicting information through several job boards.
Review your resume for writing and readability feedback, or browse other openings if this opportunity is unavailable.