Senior Application & Infrastructure Security Engineer (Gaming Industry) — European Economic Area

Senior Application & Infrastructure Security Engineer

📍 Remote / Hybrid | Full-time | 10+ years’ experience | Immediate start

We're partnering with an established iGaming technology company to find a senior security engineer. Their platform is built in-house and serves millions of requests a day for a global user base.

This is a high-ownership role inside engineering. You’ll be the go-to security authority, with real autonomy over tooling, testing and how the team responds when it matters.

What you’ll do

• Run hands-on penetration testing and VAPT across desktop apps, mobile apps, APIs and web front ends

• Find and fix vulnerabilities across a stack built on Unity, Electron, Node.js and React

• Harden the edge and the cloud: Cloudflare (WAF, bot management, rate limiting) and AWS

• Lead threat modelling for new features, and respond to incidents, including DDoS attacks

• Build security testing into CI/CD (SAST, DAST, SCA, secrets scanning)

• Run the responsible disclosure / bug bounty programme and brief leadership on risk

What you bring

• 10+ years in application, API or infrastructure security, with significant hands-on pen testing

• Experience testing desktop (ideally Electron), mobile and API surfaces

• Strong grasp of OWASP Top 10, API security (OAuth2, JWT) and secure coding

• Daily use of Burp Suite, plus tools such as OWASP ZAP, Nmap and Metasploit

• Production experience with Cloudflare and AWS security (IAM, WAF, GuardDuty, CloudTrail)

• Clear communication: you can write a report a non-technical executive understands

Big pluses

• Gaming industry background: anti-cheat, game client testing, bot and fraud detection

• OSCP or similar hands-on certification; bug bounty or CVE credits

• Fintech, payments or crypto security; PCI-DSS, ISO 27001 or SOC 2 exposure

Why this role

Your decisions will directly shape how a fast-growing platform stays secure, and your work will be visible.