About the company
A fast-growing platform in the online gaming and fintech space, operating at millions of requests per day across a global user base
Senior Security Engineer, fully remote (anywhere in Europe)
A fast-growing platform in the online gaming and fintech space, operating at millions of requests per day across a global user base, is hiring a senior security engineer. You'd be the go-to security authority here, with the autonomy to define how security works and the chance to make decisions that are visible and high-impact.
What you'll do
- Own the end-to-end security posture of all web, API, and infrastructure surfaces
- Identify, assess, and remediate vulnerabilities across frontend, backend, and cloud infrastructure
- Lead threat modelling for new features and flag gaps before they reach production
- Monitor, investigate, and respond to security incidents, from firewall events to SIEM-detected anomalies
- Conduct penetration testing and vulnerability assessments, triaging findings by business impact
- Define and enforce HTTP security header policies across all domains
- Build and maintain a DDoS response playbook and lead mitigation during attacks
- Partner with engineering teams on secure coding practices and review security-sensitive changes
- Manage the responsible disclosure and bug bounty programme
- Produce security reports, risk registers, and executive briefings
What you'll bring
- 8-10+ years hands-on experience in application, infrastructure, and web security
- Hands-on penetration testing / VAPT experience, this is a hands-on role, not a compliance role
- Background in online gaming platforms
- Deep expertise in OWASP Top 10 vulnerabilities
- Experience with DDoS detection, mitigation, and post-incident analysis
- Strong grasp of API security: OAuth2, JWT, rate limiting, endpoint hardening
- Proficiency with Burp Suite, OWASP ZAP, Nmap, Metasploit, Nikto
- Experience with SIEM platforms, log aggregation, and incident response
- Experience integrating SAST, DAST, SCA, and secrets scanning into CI/CD pipelines
- Strong written and verbal communication, able to brief non-technical stakeholders
1+ years B2B contract. Fully remote, open to candidates based anywhere in Europe. Right to work will need to be verified with documents.
Apply through RecT Solutions.
Working pattern: remote