Established in 2004, we are a tech pioneer offering world-class adult entertainment and games on some of the internet’s safest and most popular platforms. With the support of an international team of dynamic and collaborative innovators, we are on a mission to enable safe user experiences and empower our communities by celebrating diversity, inclusion, and expression — all while maintaining robust trust-and-safety protocols.
As an Application Security Team Lead, you will fulfill a critical role in protecting and strengthening the organization’s security posture while safeguarding data and applications from security threats. You will work closely with Engineering, Product and DevOps teams to implement the SSLDC, establish general security best practices and to ensure the continuation of business operations.
What you will need to be successful:
- Validate internal, external and crowd-sourced application security findings and articulate them to engineering teams
- Work in tandem with developers and product stakeholders to share knowledge, implement security best practices and reach service level agreements
- Support team manager with capacity planning, Sprint review and devising new project implementations
- Identify gaps in the organization's security posture especially from an application perspective
- Guide and participate in core operations such as vulnerability management and cryptographic operations (TLS)
- Create and maintain extensive documentation, standards and policies related to tooling, processes and procedures
- Support analysts at all levels with retesting and other requests
- Participate in threat modeling and hunting assessments
- Stay up to date with the latest trends and threats in the Information Security space as well as compliance frameworks such as (PCI-DSS, NIST and GDPR)
Must haves:
- Minimum of 3-years of experience working in application security.
- Minimum 2-years experience in a leadership role.
- Solid understanding of SDLC, CI/CD and DevSecOps.
- Strong knowledge of technical offensive and defensive security methodologies.
- Experience with Bug Bounty programs like HackOne or BugCrowd
- Farmiliarity with Linux, VMWare, PHP, GO, Pyhton, Gitlab, and Github.
- Strong verbal and written communication skills.
- Leadership skills.
Nice to haves:
- DevSecOps experience.
- Project management certifications (e.g., CPMP, CPM, CSM or PMP).
- Security certifications (e.g., CSSLP, CISSP, GSEC or SSCP).
- Exposure to the following technologies: Docker, Kubernetes, microservices, Infrastructure-as-Code.
As an equal opportunity employer, we celebrate diversity and are committed to creating an inclusive environment for all employees
In this role you may be exposed to adult content
