Application Security Engineer - Secure Gaming Platforms

Further Details

Enjoy Gaming LLC is seeking a skilled Application Security Engineer for their Bratislava, Slovakia operations. This government-adjacent role involves proactive defense of digital entertainment platforms. You'll work with engineering teams to implement secure coding standards and vulnerability mitigation strategies. As a key member of the security team, you will conduct penetration tests, perform secure code reviews, and contribute to threat modeling. Your efforts will directly impact the integrity and safety of our gaming products and services.

Secure Your Career as an Application Security Engineer with Enjoy Gaming LLC

Enjoy Gaming LLC, a distinguished software provider specializing in high-quality digital entertainment like Slots and Live Games, is actively recruiting for a skilled Application Security Engineer. This pivotal role, based in Bratislava, Slovakia, requires an individual with a keen eye for security vulnerabilities and a proactive approach to safeguarding their innovative gaming platforms.

As the technical guardian for their games and digital experiences, you will collaborate closely with Architects, Studio, Slots, and Platform Developers. Your mission is to engineer highly resilient systems by identifying and rectifying game-level vulnerabilities in web and desktop applications. If you possess an attacker's mindset combined with the ability to build secure alongside development teams, this is your ideal career opportunity.

• Job Title: Application Security Engineer
• Location: Bratislava, Slovakia
• Company: Enjoy Gaming LLC
• Key Responsibilities: Penetration testing, secure code review, threat modeling, incident response, security pipeline management
• Required Skills: 5+ years in application security, strong web/API focus, TypeScript/Node.js secure coding, authentication/authorization expertise, SAST/DAST/SCA proficiency
• Benefits: Competitive salary in EUR, remote work, comprehensive health benefits, generous paid time off, professional development support

Skills

• Over 5 years of experience in application security, offensive security, or security-focused software engineering with a strong hands-on web/API focus
• Proficient in secure code review for TypeScript/Node.js (NestJS); ability to read and review C#/.NET code
• Deep understanding of Node.js-specific vulnerabilities including prototype pollution, ReDoS, SSRF, ORM/query injection, mass assignment bypass, unsafe deserialization, and npm supply-chain risks
• Expertise in manual web and API testing, identifying flaws like broken access control (IDOR/BOLA), business logic errors, and race conditions in financial transactions
• Solid grasp of authentication and authorization mechanisms (OAuth 2.0/OIDC, SAML, JWT, session management, signed third-party callbacks, cryptographic misuse)
• Experience with threat modeling (STRIDE or similar) and secure design reviews
• Hands-on experience with SAST/SCA/DAST/secrets scanning tools in CI/CD pipelines (e.g., Semgrep, CodeQL, Trivy, Dependabot, Gitleaks), including custom rule creation and false-positive reduction
• Understanding of security in event-driven architectures (Kafka, Redis/BullMQ, Pub/Sub), including trust boundaries, message replay, and service-to-service authorization
• Ability to write and deploy production-quality fixes in TypeScript/NestJS during incidents and verify developer fixes
• Effective use of AI/LLM tools for code review and vulnerability hunting, with critical validation of outputs
• Ability to transform findings into clear, prioritized, actionable remediation plans for developers
• CRTO, OSCP, or OSWE certifications or equivalent experience (Nice to have)
• Knowledge of Cloud Platforms (GCP/AWS) (Nice to have)
• Understanding of CI/CD pipelines (Nice to have)
• Hands-on experience with Trivy, Nessus, Acunetix, or Wiz (Nice to have)
• Experience in iGaming or another regulated industry (Nice to have)

Duties and Responsibilities:

• Own and maintain application security pipelines including SCA, DAST, and SAST
• Triage findings from security tools and drive them to effective remediation
• Conduct penetration tests on new platform features, internal applications, and gaming products
• Perform basic red team activities, including leaked credential reviews and external attack surface audits
• Review complex authentication flows with third parties for cryptographic and security flaws
• Review and triage application code for security vulnerabilities, with a focus on NestJS and .NET
• Assume ownership of security risks in existing codebases and applications
• Act as the application-level security expert during incident response and deliver immediate hotfixes
• Prepare quarterly SAST/DAST vulnerability scan reports for stakeholders and participate in audit meetings
• Manage the Secure Coding and Application Security aspects of the ISMS
• Engage regularly with development teams to understand upcoming features and advise on secure design principles
• Support professional development through reimbursement for courses, training, and certifications
• Participate in well-being programs including language classes, sports, massages, or life coaching

How to apply

• 💼 Prepare Your Application: Gather your updated CV, relevant certifications, and any other documents supporting your qualifications.
• 🔎 Review Job Details: Familiarize yourself with the responsibilities and required skills for the Application Security Engineer role.
• 👉 Visit Application Portal: Navigate to the official Eurojobs application link for this vacancy.
• 📝 Complete Application Form: Fill out all the necessary fields accurately on the application page.
• 🚀 Submit Your Application: Click the apply button to finalize your submission before the closing date.
• 📅 Deadline: Ensure your application is submitted by December 17, 2026.
• 🌐 Source: This opportunity is posted on Eurojobs.com.