Senior Product Security Engineer
Core
Senior security architect owning the security review flow, threat modeling, and secure architecture design for distributed systems and integrations.
Role type
Senior IC product security engineer (security design authority)
Builds
Secure architecture patterns, threat models, and security requirements for external/internal products and business systems
Domain
iGaming / Sportsbook / Distributed Systems
Required skills
Threat modeling (STRIDE, PASTA), Secure architecture for distributed systems, Authentication/Authorization (OAuth2, OIDC, mTLS), Cloud/Edge security (AWS, Kubernetes), Business logic abuse prevention, Third-party technical security assessments, Risk-based release decision making
Preferred skills
Penetration testing background, Security certifications (CSSLP, OSWE, CISSP), Betting/fintech industry experience, Threat modeling tools (OWASP Threat Dragon), Post-incident analysis, Scripting (Python)
Technologies
AWS CloudFront, WAF, Shield, Kubernetes, JWT, OAuth2, OIDC, mTLS, Python, Jira
Responsibilities
Own security review flow from intake to sign-off, Facilitate threat modeling for features and architectural changes, Review technical designs and API contracts, Perform technical security assessments of vendors and integrations, Document risks and track remediation, Contribute to post-incident root cause analysis
Seniority
Senior, hands-on IC
