About the role The Senior Application Security Engineer acts as a technical authority. This role ensures secure design, development, deployment, and integrity across both on-prem and SaaS environments. You should be comfortable wearing multiple hats and thrive in a fast-paced, collaborative environment. What you will do • Define and mature secure SDLC and AppSec program frameworks. • Embed secure coding practices into development and backend platform engineering. • Lead threat modeling and high-risk security reviews for major releases. • Implement application security testing tools (e.g. SCA, ASPM), container scanning, and secrets detection in CI/CD pipelines. • Perform Penetration Testing and manage external penetration testing efforts • Manage application vulnerabilities from identification to remediation. • Provide guidance for development teams. • Design, maintain, and enforce organization-wide paved roads and guardrails What you bring • 5+ years in application security, secure architecture, or related functions. • Demonstrated ability to influence senior engineering and product leadership. • Proven implementation of CI/CD security automation and secure coding practices. • Strong understanding of web, API, and microservice security. • Experience with Java, Javascript. • Experience in Penetration Testing What sets you apart • Kubernetes/container security knowledge. About us ARRISE is a global leader in software development and services for the iGaming industry, bringing together more than 2,500 professionals operating across more than 12 locations worldwide. From concept through to delivery, we combine technical expertise, creativity and industry knowledge to develop products, platforms and services that shape player experiences and support some of the industry's leading brands. We are best known for the work we deliver for Pragmatic Play, creating and supporting technology, products and specialists services enjoyed by millions of players worldwide. Originally posted on Himalayas