Application Security Engineer

Description

BrainRocket is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing. Young, ambitious, and unstoppable, we've already taken Cyprus, Malta, Portugal, Poland, and Serbia by storm. Our BRO team consists of 1,300 bright minds creating innovative ideas and products. We don’t follow formats. We shape them. We build what works, launch it fast, and make sure it hits. We invite a Senior Application Security Engineer to join our team on-site. This is a 100% office-based role – no remote or hybrid options – at one of our hubs: Belgrade (Serbia), Lisbon (Portugal), Sofia (Bulgaria), Warsaw (Poland), Yerevan (Armenia). The final location will depend on business needs and the feasibility of relocation from your current spot. We provide relocation support.

Responsibilities

Demonstrated ability to collaborate with other teams to achieve complex objectives.
Responsible for security architecture design from cloud infrastructure to application through the implementation of "secure by design" principles.
Collaborate with product managers, architects, and developers on the implementation of the security controls platform ecosystem and products.
Proof security implementations within infrastructure and application deployment manifests and the CI/CD pipelines.
Define required policies, controls, and capabilities for the protection of products and environments.
Build and validate declarative threat models automation.
Participate in engineering teams’ product planning cycles and committees.
Oversee the product security aspects for migration of products and services from Data Center to public cloud, e.g., AWS.
Serve as a trusted cyber security advisor to product and application teams.

Requirements

Experience integrating security scanning/tooling into the development pipeline.
Experience in analysing and securing microservices and applications developed using JavaScript and Typescript.
Experience with CI/CD pipelines (such as Gitlab, Jenkins) and infrastructure-as-a-code models (such as Terraform, Helm, or CloudFormation).
Hands-on development experience in Python/shell scripting.
Strong understanding of supply chain security, software integrity, and secure software delivery.
Experience with Docker and mesh technologies (such as ISTIO).
Experience with architecture and security reviews, threat modelling, and application risk is highly desired.
Experience working with Agile methodologies.
Knowledge of privacy laws and regulations, such as GDPR desired.
Familiarity with industry regulations, frameworks, and practices. For example, PCI, ISO 27001, NIST, etc.
In-depth experience with architecting secure services on Kubernetes.
Extensive experience with architecting secure services on AWS or on-prem data centers.
Security-related professional certifications e.g., CISSP, CISM, CCSK, CCSP, CEH, are highly desirable.

Benefits

Career growth opportunities in an international and dynamic environment;
Opportunity to develop language skills with partial compensation for language courses;
Special gifts for birthdays, weddings, and newborns;
20 working days of paid annual vacation, plus 6 paid sick leaves;
Office snacks and refreshments;
Sports package to support a healthy lifestyle;
Comprehensive medical insurance;
Comfortable office with great facilities in a prime location;
Exciting corporate events, team-building activities, and international company parties.

Similar Active Jobs

BrainRocketHR & TalentSpain

Employee Experience Manager

The Employee Experience Manager is responsible for leading and executing internal cultural initiatives, events, and wellness programmes for the company's Spanish office. This role requires a highly organised individual to manage vendor relationships and ensure all employee experiences meet high quality standards. It is a notable opportunity for an experienced professional to take ownership of EE standards within a fast-paced, international environment. The position offers significant autonomy and the chance to collaborate with global HR teams.

On-siteFull-timeSeniorEnglish

2026-06-17

BrainRocketContent & SEOYerevan, Belgrade, Armenia, Serbia

Content Creator & SMM Project Manager

This role combines creative content production with structured project management to drive brand presence. You will be responsible for creating visual and written assets, managing content calendars, and coordinating workflows across teams. It is a notable opportunity for a creative professional to work in a fast-paced global tech environment with significant creative freedom.

On-siteFull-timeMid-level3+ yearsEnglish

2026-06-17

BrainRocketProduct & DevelopmentValència, Spain

Engineering Manager

BrainRocket is seeking an Engineering Manager to lead multiple Flutter teams in Valencia, Spain. The role involves owning the mobile engineering strategy, architecture, and delivery processes, as well as driving operational excellence and ensuring app quality. Key responsibilities include managing release cycles, CI/CD pipelines, and collaborating with cross-functional teams. This is an office-based role with relocation support for those needing to move to Valencia.

On-siteFull-timeLead3+ yearsEnglish

2026-06-16

BrainRocketProduct & DevelopmentWarsaw, Poland

Security Access Management Team Lead

BrainRocket is seeking an experienced Security Access Management Team Lead to join their Information Security team in Warsaw, Poland. This on-site role requires a candidate with over 5 years of information security experience, including at least 1 year in a team lead capacity. The position involves leading the Access Administration team, managing user access lifecycles, ensuring compliance with security principles, and supporting continuous improvement of IAM/PAM processes. The company offers excellent benefits, including career growth opportunities, partial compensation for language courses, and comprehensive medical insurance.

On-siteLead5+ yearsEnglish

2026-06-16

BrainRocketProduct & DevelopmentLisbon, Portugal

DevSecOps Engineer

BrainRocket is seeking a DevSecOps Engineer to join their team on-site in Lisbon, Portugal. This role focuses on developing and improving the company's DevSecOps culture, including secure Istio and Kubernetes setup, CI/CD security, and automation of security processes. Key responsibilities involve implementing security analysers, scanners, and Vault management systems. The ideal candidate will have experience with DevOps principles, Kubernetes, configuration management tools, cloud security, and infrastructure analysis for information security risks.

On-siteFull-timeMid-levelEnglish

2026-06-13