Senior Application Security Engineer

Delasport — Implementing Technological Solutions Here and Now.

Delasport is an iGaming Software company providing Sports Betting & Online Casino software, and turnkey B2B solutions. Established in 2010, Delasport delivers a one-stop-shop solution of Sports Betting and Online Casino from a White-Label, with a full range of management services to a Plug&Play iFrame and a complete Turnkey. We are establishing an R&D center in Kyiv, and are looking for top talents to join our team.

RESPONSIBILITIES

• Provide technical leadership, guidance, and direction to the Developers and Operations team
• Develop and maintain documentation of application and networks security control
• Integrate Security Tools and Processes
• Perform application and networks scanning and testing
• Design technical solutions to address security weaknesses
• Analyze system services and spotting issues in networks, and applications
• Follow security best practices in performing tasks
• Develop and maintain software application security policies and procedures
• Communicate the nature and severity of security concerns to the development and operation teams
• Help the development team assess and remediate concerns
• Respond to Security Incidents 

REQUIREMENTS

• 5 years of experience in application and network security, including the understanding of application security attacks, vulnerabilities, and mitigations
• Knowledge of common Web Application security vulnerabilities (OWASP TOP10, SANS 25, etc.)
• Proficiency with cloud security principles and best practices (e.g., AWS, Azure, GCP), experience with DevOps, SRE, Kubernetes, Containers, and CI/CD
• Proven experience in the implementation and maintenance of WAF solutions and a deep understanding of working with L3-L7 Policies
• Familiarity with security tooling such as, WAF, FW, CSPM, CNAPP, EDR, SIEM, SOAR, DLP, SAST, DAST.
• Ability to conduct investigations into information security events – analysis of network and application based events, issuing IOCs and implementing them in the systems
• Ability to work autonomously, taking ownership of security challenges and driving solutions
• Excellent communication skills and ability to effectively communicate security risks and recommendations to technical and non-technical stakeholders
• Upper-Intermediate English level