Application Security Engineer at Enjoy Gaming LLC Bratislava

Further Details

Enjoy Gaming LLC is now recruiting in Bratislava. Apply for the position of Application Security Engineer. The required qualification is BS. This role is within the Gaming industry. A bachelor degree is preferred. The application process commenced on 02 November, 2026 via Eurojobs.com. Interested and eligible candidates must submit their applications before the deadline on 17 December, 2026. This is a prime opportunity to join a renowned organization. For a step-by-step application guide and full eligibility criteria, please see the official advertisement on https://www.jobseed.pk.

Application Security Engineer at Enjoy Gaming LLC

We have an immediate opening for the post of Application Security Engineer. The job location is Bratislava.

Key Requirements:

• Qualification: BS
• Experience: 60 months minimum
• Vacancies: 1

This is a fantastic chance to work with a reputed organization and grow professionally.

Skills

• Over 5 years of experience in application security, offensive security, or security-focused software engineering with a strong hands-on web/API focus
• Proficient in secure code review for TypeScript/Node.js (NestJS); ability to read and review C#/.NET code
• Deep understanding of Node.js-specific vulnerabilities including prototype pollution, ReDoS, SSRF, ORM/query injection, mass assignment bypass, unsafe deserialization, and npm supply-chain risks
• Expertise in manual web and API testing, identifying flaws like broken access control (IDOR/BOLA), business logic errors, and race conditions in financial transactions
• Solid grasp of authentication and authorization mechanisms (OAuth 2.0/OIDC, SAML, JWT, session management, signed third-party callbacks, cryptographic misuse)
• Experience with threat modeling (STRIDE or similar) and secure design reviews
• Hands-on experience with SAST/SCA/DAST/secrets scanning tools in CI/CD pipelines (e.g., Semgrep, CodeQL, Trivy, Dependabot, Gitleaks), including custom rule creation and false-positive reduction
• Understanding of security in event-driven architectures (Kafka, Redis/BullMQ, Pub/Sub), including trust boundaries, message replay, and service-to-service authorization
• Ability to write and deploy production-quality fixes in TypeScript/NestJS during incidents and verify developer fixes
• Effective use of AI/LLM tools for code review and vulnerability hunting, with critical validation of outputs
• Ability to transform findings into clear, prioritized, actionable remediation plans for developers
• CRTO, OSCP, or OSWE certifications or equivalent experience (Nice to have)
• Knowledge of Cloud Platforms (GCP/AWS) (Nice to have)
• Understanding of CI/CD pipelines (Nice to have)
• Hands-on experience with Trivy, Nessus, Acunetix, or Wiz (Nice to have)
• Experience in iGaming or another regulated industry (Nice to have)

Duties and Responsibilities:

• Own and maintain application security pipelines including SCA, DAST, and SAST
• Triage findings from security tools and drive them to effective remediation
• Conduct penetration tests on new platform features, internal applications, and gaming products
• Perform basic red team activities, including leaked credential reviews and external attack surface audits
• Review complex authentication flows with third parties for cryptographic and security flaws
• Review and triage application code for security vulnerabilities, with a focus on NestJS and .NET
• Assume ownership of security risks in existing codebases and applications
• Act as the application-level security expert during incident response and deliver immediate hotfixes
• Prepare quarterly SAST/DAST vulnerability scan reports for stakeholders and participate in audit meetings
• Manage the Secure Coding and Application Security aspects of the ISMS
• Engage regularly with development teams to understand upcoming features and advise on secure design principles
• Support professional development through reimbursement for courses, training, and certifications
• Participate in well-being programs including language classes, sports, massages, or life coaching

How to apply

How to Apply for Application Security Engineer:

• 💼 Prepare Your Application: Gather your updated CV, relevant certifications, and any other documents supporting your qualifications.
• 🔎 Review Job Details: Familiarize yourself with the responsibilities and required skills for the Application Security Engineer role.
• 👉 Visit Application Portal: Navigate to the official Eurojobs application link for this vacancy.
• 📝 Complete Application Form: Fill out all the necessary fields accurately on the application page.
• 🚀 Submit Your Application: Click the apply button to finalize your submission before the closing date.
• 📅 Deadline: Ensure your application is submitted by December 17, 2026.
• 🌐 Source: This opportunity is posted on Eurojobs.com.