Senior Application Security Engineer at LeoVegas Group

✨ The Stack take on this LeoVegas Group job

• 🏢 LeoVegas Group has 4 jobs here, 4 with visa sponsorship see all
• 📊 4 Security Engineer jobs in Spain in the last 60 days see them
• 🛂 Visa: Highly Qualified Professional permit. Education: Higher education degree guide
• 💡 No salary shown. Ask LeoVegas Group if it is above the minimum.

Updated 2026-11-05, from our data and official sources.

Apply with your AI assistant

With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.

Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/senior-application-security-engineer-leovegas-group

Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "senior-application-security-engineer-leovegas-group": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.

About the role

Responsibilities:
- Embed security across the SDLC: threat modeling, secure design reviews and pre-release security gates.
- Run and lead application security testing and code reviews for web and mobile apps; triage findings and track remediation.
- Harden and review APIs with focus on authentication, authorization and abuse prevention.
- Operate and tune perimeter defenses (WAF, DDoS mitigation) to protect availability and revenue-critical services.
- Help secure cloud infrastructure and Kubernetes workloads; define hardening guidance and review configurations.
- Automate security checks and tooling in CI/CD pipelines to reduce manual effort and improve coverage.
- Support regulatory and ISO certification efforts and act as the technical liaison to compliance stakeholders.
- Partner with engineering, product and external partners (including Google) to shape secure AI workflows and architectures.

Requirements:
- Extensive application security experience securing high-scale consumer-facing web and mobile platforms; strong knowledge of OWASP Top 10.
- Practical code review skills and experience with automated SAST/DAST tooling.
- Deep networking knowledge (TCP/IP, DNS, HTTP/S, TLS) and ability to reason at protocol and packet levels.
- Solid cloud security experience and familiarity with Kubernetes, microservices and cloud-native trade-offs.
- Experience in regulated industries (iGaming, fintech, healthcare) and understanding of compliance rigor.
- Strong scripting/automation ability (Python or similar) to build repeatable security workflows.
- Excellent communication skills and ability to balance risk with business needs.

Responsibilities

Secure the development lifecycle by embedding security from design to release, auditing code, and hardening APIs. Manage the WAF and DDoS mitigations, secure cloud infrastructure, and automate security checks across pipelines, while partnering with engineering and product teams to foster a Security by Design culture.

Requirements

Strong background in securing high-scale consumer-facing applications across mobile and web; ability to read and audit code and automate security workflows with Python. Deep understanding of networking (TCP/IP, DNS, HTTP/S, TLS), cloud security practices, Kubernetes, and experience in regulated industries (iGaming, Fintech, Healthcare).

Key skills

• OWASP Top 10 — in 12 other listings on The Stack
• Code Review — in 85 other listings on The Stack
• Python automation — not in any other listing on The Stack
• Cloud Security — in 71 other listings on The Stack
• Kubernetes — in 585 other listings on The Stack
• API Security — in 4 other listings on The Stack
• Web Application Security — in 6 other listings on The Stack
• Threat Modeling — in 32 other listings on The Stack
• WAF
• DDoS mitigation
• Regulatory Compliance
• Vendor Management

On The Stack (as of 2026-11-05)

• LeoVegas Group has 3 other listings on The Stack, 3 of them marked as offering visa sponsorship.
• 76 visa-sponsored jobs in Spain on The Stack, posted in the last 60 days.
• 43 visa-sponsored security engineer jobs in Europe on The Stack, posted in the last 60 days.

Frequently asked questions about LeoVegas Group

Is this Senior Application Security Engineer role still open?

It was posted on 2026-11-03 and is listed as active on The Stack. Confirm on LeoVegas Group's application page before applying.

Does LeoVegas Group offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on LeoVegas Group's site.

Where is this role located?

The listing gives the location as Málaga, ES, Spain. It is marked hybrid.

What skills does this role ask for?

The listing names: OWASP Top 10, Code Review, Python automation, Cloud Security, Kubernetes, API Security, Web Application Security, Threat Modeling, WAF, DDoS mitigation, Regulatory Compliance, Vendor Management.