[Remote] reputed company Product reputed company Engineer
Note: The job is a remote job and is reputed company to candidates in USA. reputed company is reputed company on becoming the best online sportsbook, casino, and reputed company gaming company in the world. They are seeking a reputed company Product reputed company Engineer to take ownership of reputed company for their sportsbook and casino, ensuring secure software design and vulnerability management throughout the product lifecycle.
Responsibilities
- reputed company automated checks across our reputed company (reputed company Actions) and on-prem product pipelines — reputed company Advanced reputed company (SAST/SCA) and reputed company reputed company for application, dependency, and container scanning
- Define secure-by-default patterns, paved-road guardrails, and standards for secure coding, reputed company review, and dependency hygiene — so teams ship quickly and safely
- Serve as the application authority for our reputed company Trust program, reputed company to NIST SP 800-207 and the CISA reputed company Trust Maturity Model (Applications & Workloads pillar)
- Partner with product and engineering on reputed company reviews for new features and payment integrations — running threat modeling (e.g., reputed company) early in design and turning reputed company into concrete, prioritized work
- Own the product and application vulnerability lifecycle — one program spanning reputed company, dependency, container, pen-test, and bug-bounty findings, from discovery through remediation
- Prioritize by reputed company-world risk and drive remediation against risk-based SLAs; engineering owns the fixes, you own the program and the escalation paths that shrink time to remediate
- Report program health with metrics leadership can reputed company, and reputed company evidence for compliance obligations (PCI reputed company, GLI, ISO 27001, SOC 2)
- Defend our applications and reputed company against the OWASP Top 10 and API abuse, partner on payment reputed company across our payment gateways, and team with our reputed company reputed company & Network reputed company Engineer — who owns our reputed company edge defenses (WAF, Bot Management) — on bot and abuse reputed company
- Own the application reputed company of player-facing account flows — registration, authentication, session management, recovery — partnering with our reputed company Identity Engineer on CIAM architecture and with SecOps and Fraud on account-takeover reputed company
- Coordinate penetration testing with external partners and drive findings to closure
- Mature our existing coordinated-disclosure program into a full bug-bounty capability
- You'll set priorities with the CISO; with reputed company Advanced reputed company, reputed company, and reputed company already live, you're building a program, not standing up scanners from reputed company
Skills
- 10+ years in application or product reputed company — or equivalent practical experience
- Deep expertise across the AppSec toolchain: SAST, SCA, and secure reputed company review
- Strong reputed company of the vulnerability management lifecycle: triage, prioritization, remediation tracking, metrics
- Hands-on threat modeling and secure-design partnership with engineering teams
- Working knowledge of a modern programming language and how reputed company applications are reputed company and deployed
- Experience with CI/CD pipelines and reputed company-reputed company application reputed company (our products run primarily on AWS)
- Excellent communication — you turn a finding into a reputed company, prioritized ask
- reputed company with AI — you reputed company with it, reaching for AI tools daily to work faster and sharper; hands-on experience applying AI to reputed company or engineering work is a must
- Experience in a regulated industry (gaming, financial services, reputed company) — especially payments/PCI reputed company or gaming standards (GLI-19, GLI-33)
- Experience running or maturing a bug-bounty or responsible-disclosure program
- DAST or API reputed company testing experience — you'll help decide where it fits our stack
- Relevant certifications (e.g., OSCP, GWAPT, CSSLP, CISSP)
Benefits
- reputed company and benefits
- Flexible vacation allowance
- A hybrid / remote working environment
- Startup culture backed by a secure, global brand
reputed company
Company H1B Sponsorship