Application Security Engineer

Responsibilities

• Own and maintain our application security pipelines: SCA (Github/Trivy), DAST (Nessus, Acunetix, Wiz), and SAST
• Triage findings from these tools and drive them to remediation
• Perform penetration tests on new platform features, new internal applications, and new slots and live games
• Run basic red team activities, including leaked credential reviews and external attack surface audits
• Review complex auth flows with various third parties for cryptographic and security issues
• Review/Triage application code for security issues ( 85% NestJS / 15% .NET )
• Own security risk in existing code and applications
• Act as the application-level security expert during incident response and be ready to deliver hotfixes yourself when needed
• Prepare our quarterly SAST/DAST vulnerability scan reports for stakeholders/regulators and take part in audit meetings
• Own the Secure Coding and Application Security areas of our ISMS

Languages