Senior Application Security Engineer

Delasport is a leading iGaming software development company that delivers a one-stop-shop solution for sports betting, online casino, and player account management. Our platform is player-centric and focuses on personalization and cutting-edge technological innovations.

Since its founding in 2010, Delasport has won multiple international awards and has gained a proven track record of excellence, stability, and overall success. Yet, this only motivates us to reach higher and higher.

Currently, Delasport is proud to have over 400 experts in various IT and business fields and several offices: in Bulgaria (Sofia and Plovdiv), Ukraine and Malta.

YOUR RESPONSIBILITIES:

• Provide technical leadership, guidance, and direction to the Developers and Operations team
• Develop and maintain documentation of application and networks security control
• Integrate Security Tools and Processes
• Perform application and networks scanning and testing
• Design technical solutions to address security weaknesses
• Analyze system services and spotting issues in networks, and applications
• Follow security best practices in performing tasks
• Develop and maintain software application security policies and procedures
• Communicate the nature and severity of security concerns to the development and operation teams
• Help the development team assess and remediate concerns
• Respond to Security Incidents

REQUIREMENTS:

• 5 years of experience in application security and network security, including the understanding of application security attacks, vulnerabilities, and mitigations
• Knowledge of common Web Application security vulnerabilities (OWASP TOP10, SANS 25, etc.)
• Proficiency with cloud security principles and best practices (e.g., AWS, Azure, GCP), experience with DevOps, SRE, Kubernetes, Containers, and CI/CD
• Hands-on experience in the implementation and maintenance of Palo Alto / Checkpoint Firewalls systems and a deep understanding of working with L2/L3/L7 Policies
• Familiarity with security tooling such as, WAF, FW, CSPM, CNAPP, EDR, SIEM, SOAR, DLP
• Ability to conduct investigations into information security events – analysis of network and application based events, issuing IOCs and implementing them in the systems
• Ability to work autonomously, taking ownership of security challenges and driving solutions
• Excellent communication skills and ability to effectively communicate security risks and recommendations to technical and non-technical stakeholders

OUR REWARD TO YOU IS:

• Competitive salary package
• 20+ vacation days
• Travel allowance
• Food vouchers
• Birthday vouchers
• Newborn vouchers
• Health Insurance
• Multisport card
• Friendly work environment with positive teammates
• Friday Happy hour filled with free drinks and snacks
• Courses and certifications budget
• Team-building activities
• Relocation package for Sofia, Bulgaria