# Senior Application Security Engineer at LeoVegas Group

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Embed security across the SDLC: threat m

- **Company:** LeoVegas Group (https://jobs.trythestack.co/companies/leovegas-group)
- **Location:** Málaga, ES, Spain
- **Work arrangement:** Hybrid
- **Employment type:** Full-time
- **Experience level:** 5–10 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** OWASP Top 10, Code Review, Python automation, Cloud Security, Kubernetes, API Security, Web Application Security, Threat Modeling, WAF, DDoS mitigation, Regulatory Compliance, Vendor Management
- **Posted by employer:** 2026-11-03
- **Added to The Stack:** 2026-11-04
- **Listed until:** 2027-01-02
- **Status:** Active
- **Apply:** https://jobs.ashbyhq.com/leovegasgroup/9d4af2e0-3a17-4dbd-b53f-1dea6c47173f/application?utm_source=40Pykng26X&src=Linkedin (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/senior-application-security-engineer-leovegas-group

## About the role

Responsibilities:
- Embed security across the SDLC: threat modeling, secure design reviews and pre-release security gates.
- Run and lead application security testing and code reviews for web and mobile apps; triage findings and track remediation.
- Harden and review APIs with focus on authentication, authorization and abuse prevention.
- Operate and tune perimeter defenses (WAF, DDoS mitigation) to protect availability and revenue-critical services.
- Help secure cloud infrastructure and Kubernetes workloads; define hardening guidance and review configurations.
- Automate security checks and tooling in CI/CD pipelines to reduce manual effort and improve coverage.
- Support regulatory and ISO certification efforts and act as the technical liaison to compliance stakeholders.
- Partner with engineering, product and external partners (including Google) to shape secure AI workflows and architectures.

Requirements:
- Extensive application security experience securing high-scale consumer-facing web and mobile platforms; strong knowledge of OWASP Top 10.
- Practical code review skills and experience with automated SAST/DAST tooling.
- Deep networking knowledge (TCP/IP, DNS, HTTP/S, TLS) and ability to reason at protocol and packet levels.
- Solid cloud security experience and familiarity with Kubernetes, microservices and cloud-native trade-offs.
- Experience in regulated industries (iGaming, fintech, healthcare) and understanding of compliance rigor.
- Strong scripting/automation ability (Python or similar) to build repeatable security workflows.
- Excellent communication skills and ability to balance risk with business needs.

## Responsibilities

Secure the development lifecycle by embedding security from design to release, auditing code, and hardening APIs. Manage the WAF and DDoS mitigations, secure cloud infrastructure, and automate security checks across pipelines, while partnering with engineering and product teams to foster a Security by Design culture.

## Requirements

Strong background in securing high-scale consumer-facing applications across mobile and web; ability to read and audit code and automate security workflows with Python. Deep understanding of networking (TCP/IP, DNS, HTTP/S, TLS), cloud security practices, Kubernetes, and experience in regulated industries (iGaming, Fintech, Healthcare).

## FAQ

- **Is this Senior Application Security Engineer role still open?** It was posted on 2026-11-03 and is listed as active on The Stack. Confirm on LeoVegas Group's application page before applying.
- **Does LeoVegas Group offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on LeoVegas Group's site.
- **Where is this role located?** The listing gives the location as Málaga, ES, Spain. It is marked hybrid.
- **What skills does this role ask for?** The listing names: OWASP Top 10, Code Review, Python automation, Cloud Security, Kubernetes, API Security, Web Application Security, Threat Modeling, WAF, DDoS mitigation, Regulatory Compliance, Vendor Management.

## More like this

- [All jobs at LeoVegas Group](https://jobs.trythestack.co/companies/leovegas-group.md)
- [Security Engineer Visa Sponsorship Jobs in Europe](https://jobs.trythestack.co/visa-sponsorship-jobs/role/security-engineer)
- [All visa sponsorship jobs in Spain](https://jobs.trythestack.co/visa-sponsorship-jobs/spain)
- [Sr. Application Security Engineer at Lingokids](https://jobs.trythestack.co/jobs/sr-application-security-engineer-lingokids.md)
- [Application Security Engineer - Senior at Plata Card](https://jobs.trythestack.co/jobs/application-security-engineer-senior-plata-card.md)
- [Vulnerability & Application Security Engineer at EY](https://jobs.trythestack.co/jobs/vulnerability-application-security-engineer-ey.md)
- [Senior Data Engineer - Platform at Ebury](https://jobs.trythestack.co/jobs/senior-data-engineer-platform-ebury.md)
- [Principal Product Manager at Wallapop](https://jobs.trythestack.co/jobs/principal-product-manager-wallapop.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://jobs.ashbyhq.com/leovegasgroup/9d4af2e0-3a17-4dbd-b53f-1dea6c47173f/application?utm_source=40Pykng26X&src=Linkedin). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "senior-application-security-engineer-leovegas-group": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Senior Application Security Engineer at LeoVegas Group, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/senior-application-security-engineer-leovegas-group)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md