Lead Product Security Engineer - Sunderland - Hybrid
tombola Sunderland, England, United Kingdom
We’re hiring a Lead Product Security Engineer! At tombola, we build experiences players can trust — and security is at the core of that promise. We’re looking for a Lead Product Security Engineer to set the vision for product security, lead a small but mighty team, and make sure security is built into everything we create.
What you’ll do:
Own our product security strategy
Lead & grow a small security team
Shift security left in our SDLC
Champion security tooling, automation & best practice
You’ll need:
* Proven background in application/product security with leadership experience.
* Strong knowledge of mobile and web application security tooling and testing (SAST, DAST, CI/CD integration).
* Experience embedding security into the SDLC and agile practices.
* Familiarity with cloud security (Cloudflare and AWS preferred).
* Understanding of standards and frameworks (OWASP Top 10, ISO27001, PCI-DSS, NIST).
* Certifications like CISSP, OSCP, CEH, AWS are a bonus.
What’s in it for you?
Quarterly bonus, hybrid working, private healthcare, 25+ days holiday, free meals & coffee, onsite gym, and loads of L&D.
Sunderland (Hybrid – 2 days at home) | Permanent
tombola is an equal opportunities employer and welcomes applications from all qualified candidates.
#J-18808-Ljbffr