Staff Engineer - Security
New
S
SpinQuestSocial gaming
In the United States on a remote basisFull-TimeStaff
Salary$190,000 - $220,000 a year; Annual performance bonus: 10% –15%
Apply NowOpens the employer's application page
Job Details
- Experience
- 8+ years of experience in Application Security, Security Engineering, or Software Engineering with a strong security focus
- Required Skills
- Node.jsReact NativeTypeScriptNext.jsReact
Requirements
- Have 8+ years of experience in Application Security, Security Engineering, or Software Engineering with a strong security focus.
- Have experience embedding security into modern SDLCs in fast-moving environments.
- Bring hands-on secure coding and code review experience, ideally in TypeScript/Node.js ecosystems.
- Understand common vulnerabilities, including OWASP Top 10, and modern attack vectors.
- Have experience with application security tooling such as SAST, DAST, and SCA.
- Have experience integrating security tools into CI/CD pipelines.
- Have strong experience with threat modeling and designing secure, scalable architectures.
- Be familiar with real-time, high-traffic systems, APIs, and distributed architectures.
- Bonus: Experience securing payments, transactions, or fintech-like systems.
- Bonus: Background in gaming, iGaming, or highly interactive real-time platforms.
- Bonus: Experience working across cloud and/or on-prem infrastructure alongside SRE or platform teams.
- Bonus: Familiarity with DevSecOps practices and security automation at scale.
Responsibilities
- Embed security into every stage of the SDLC, from design to deployment.
- Lead secure code reviews across TypeScript/Node.js services and React, Next.js, and React Native stacks.
- Partner with backend, frontend, SRE, and platform teams to identify and mitigate risks in real-time systems, APIs, and payment flows.
- Drive threat modeling for new features and systems, including transactions, integrations, and shared platform services.
- Own vulnerability discovery, triage, prioritization, remediation, and reporting.
- Implement security tooling, including SAST, DAST, SCA, and secrets scanning, in CI/CD pipelines.
- Establish secure architecture patterns for high-scale, real-time systems and transaction processing.
- Define and execute the application security strategy and roadmap.
- Support and lead security incident response, including root cause analysis and long-term remediation.
View Full Description & ApplyYou'll be redirected to the employer's site
