AppSec Jobs

Playtech

System & AI Security Engineer

Kyiv, , Ukraine
Apply on Playtech's site →

At a Glance

AzurePythonTerraformCI/CDOWASPNIST

About This Role

Job Description

Your influential mission. You will...

  • Review the AI systems and infrastructure, including local and cloud LLM deployments, gateways, vector stores, and agentic / MCP components, and provide clear recommendations on required hardening measures and areas for improvement.
  • Design, Implement, Support and Improve various technologies within the team, and our area of responsibility (EDR, Proxy, Email Security, Endpoint Hardening)
  • Participate in, and support Security Risk Assessments, audits and Compliance reviews required by various standards and laws.
  • Assess existing guardrails and controls, such as input/output filtering, prompt-injection defences, rate limiting, and authentication, against industry best practice, provide recommendations to strengthen their effectiveness and drive the implementation of improvements and new controls to ensure the secure and responsible use of AI.
  • Recommend and prioritize hardening across the infrastructure behind self-hosted and cloud-based LLMs, and guide teams through remediation.
  • Evaluate the AI supply chain, such as model provenance, AIBOM/SBOM, dependency and artifact scanning, and provide recommendations to address gaps (Including Vibe Coded Applications).
  • Define standards, reference patterns, and best-practice guidance to ensure teams across Playtech build and operate AI securely.
  • Review logging, observability, and detection coverage for AI workloads mapped to frameworks such as MITRE ATLAS, and recommend enhancements to ensure the SOC can effectively monitor and respond across the full AI attack surface.
  • Assess identity, access, and secrets management for models, tools, and data, advising on least-privilege improvements.
  • Support compliance in a regulated environment with audit-ready assessments, evidence, and documentation.
  • Drive innovation within the team — Investigate and where possible implement Agentic AI usage within the unit, to optimize time consuming activities (Chatbots, automation with Hermes or n8n etc).

Qualifications

Components for success. You...

  • Hold valid and relevant Certifications or equivalent, verifiable experience in the field of Cyber Security and/or Information Technology.
  • Have experience working with EDR Solutions (Defender for Endpoint, Crowdstrike, SentinelONE etc)
  • Experience with Email Security Solutions, and working knowledge of Email solutions is an advantage.
  • Bring solid infrastructure and security engineering experience — Linux, networking, cloud, IAM, container security, automation, System Hardening etc.
  • Know your way around both self-hosted LLM deployment and cloud LLM platforms (e.g. Azure Foundry, Amazon Bedrock, Google VertexAI, Ollama, LMStudio etc).
  • Can review and assess AI systems against best practice and clearly advise teams on what to harden, improve, or remediate on an ongoing basis.
  • Have prior knowledge of LLM-specific threats: prompt injection, sensitive-data disclosure, data/model poisoning, excessive agency, insecure output handling, supply-chain risk and how to mitigate them.
  • Have knowledge of some of the various AI security frameworks and Guidelines — OWASP Top 10 for LLM Applications (2025) and for Agentic Applications (2026), MITRE ATLAS, NIST AI RMF, ISO/IEC 42001, CISA/NSA guidance, and the EU AI Act — and how to translate them into controls.
  • Have prior experience in guardrail implementation and design evaluation, including prompt-injection defense, output validation, and hallucination mitigation.
  • Had exposure to using infrastructure-as-code (Terraform, Ansible) and CI/CD pipelines to make controls repeatable.
  • Have experience navigating, and working in regulated environments such as gaming, finance, or healthcare.
  • Have clear communication, presentation and collaboration skills — strong documentation skills and cross-team collaboration are central to this role.

You'll get extra points for...

  • Hands-on experience building CI/CD security gates and guardrails — the role advises on these more than builds them, but practical experience helps you guide teams well.
  • Working knowledge of Python and Bash scripting is an advantage, any other development languages are also a bonus.
  • Hands-on experience securing MCP / agentic AI infrastructure and the governance of these tools.
  • Hands-on experience with AI Enablement and optimizing workflows using agentic AI and “Vibe coding”.
  • Familiarity with AIBOM / SBOM tooling (e.g. OWASP Dependency-Track, and the CycloneDX SBOM Standard used) and supply-chain security.
  • Relevant certifications across cloud or emerging AI-security credentials.

Additional Information

Thrive in a culture that values...

  • Collaboration across teams
  • Ownership, curiosity, and a proactive approach to solving complex security challenges
  • Continuous learning and the opportunity to grow into the role while working on AI security topics that are becoming increasingly important for the business.
  • Practical impact, with the chance to help shape Playtech’s AI future and support secure AI adoption across the company.

SYSYTEM SECURITY TEAM

You will be part of the System Security - Endpoint & Gateway team, collaborating closely with another System Security team focused on Data & Identity Security. You will work with team members including an AI Security Engineer focused on Workforce AI, System Security Engineers, and a Principal Security Engineer, while also collaborating with the Playtech AI Committee, other Playtech Security teams, the Application Security Team, and teams across the wider business.

Playtech is an equal opportunities employer. Our mission is to welcome everyone and create inclusive teams. We celebrate differences and encourage everyone to join us and be themselves at work.

Company Description

About Playtech   

Founded in 1999, the company has a premium listing on the Main Market of the London Stock Exchange and is focused on regulated and regulating markets across its B2B business. By leveraging its proprietary technology, Playtech delivers innovative products and services to ensure a safe, engaging and entertaining gaming experience.   

As the gaming industry's leading technology company, it combines business intelligence-driven software, services, content, and platform technology to drive excellence and innovation across the sector. Read more about who we are and what we do here: www.playtechpeople.com and www.playtech.com  

Here at Playtech, we genuinely believe that people are our biggest asset. Diverse thoughts, experiences, and individual characteristics enrich our work environment and lead to better business decisions. Embracing differences and maintaining transparency in our processes is the core of Playtech's overall commitment to responsible business practices

Ready to level up your career?

Playtech’s System Security team is looking for a proactive System and AI Security Engineer to join our team, and be a part of our journey, securing our Systems as well as playing a part in our Secure AI Adoption within the company, taking part in various projects and initiatives in various areas.

In this role, you will primarily focus on infrastructure security, including EDR, email security gateways, and endpoint hardening, while collaborating closely with development, security, and teams adopting AI. Due to the nature of the position, hands-on experience securing and administering platforms that support AI and agentic workloads is essential. Experience with containerization, virtualization, CI/CD pipelines, and related technologies is highly desirable.

We are looking for someone collaborative, proactive, and curious, with a strong sense of ownership and a continuous learning mindset. This is a great opportunity to contribute to Playtech’s AI security journey and help shape how AI is adopted securely across the business.

Source: Playtech careers · View original posting


About Playtech

Industry

information technology & services

Employees

7,400

943 engineers

Security at Playtech

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

  • Section 1 — Philosophy and priorities Products secure by design — "Our team helps ensure Playtech’s products are secure by design." (Playtech AI Security Engineer job posting)[2] Cross-functional risk reduction — "We work closely with engineering, product, data science, and security teams across the business to identify risks, improve security practices, and support the delivery of secure solutions." (Playtech AI Security Engineer job posting)[2] Secure-by-default enablement — "Help build secure-by-default patterns and guidance so teams can ship AI features safely." (Playtech AI Security Engineer job posting)[2] Priority areas — AI and LLM threat modeling, architecture reviews, adversarial testing, guardrails, validation, monitoring, and translating the evolving AI threat landscape into practical standards. (Playtech AI Security Engineer job posting)[2] Risk and assurance objective — Playtech states that its SSDLC includes processes and technologies intended to reduce the risk of introducing security weaknesses into products and services. (Playtech Trust and Assurance Statement)[9] Developer-first vs gating stance — Public materials indicate an enablement and collaboration model, but do not explicitly state whether AppSec uses mandatory release gates.
  • Stated pain points or goals — AI-specific risks include prompt injection, data leakage, jailbreaks, unsafe output handling, and insecure RAG, agent, tool-calling, model API, and integration architectures. (Playtech AI Security Engineer job posting)[2].

Security Team

Section 2 — People and structure Org model — A centralized international Application Security team is described within Playtech’s Security unit, collaborating with engineering, product, data science, and security teams across multiple locations. (Playtech AI Security Engineer job posting)[5] Reporting line — Playtech’s Information Security Department provides leadership and oversight for the security programme; public sources do not identify a specific AppSec reporting title such as CISO or CTO. (Playtech Trust and Assurance Statement)[9] No verified AppSec leader and LinkedIn URL were identified in the available results. Related security personnel — Georgi Stankov is publicly listed as a System Security Engineer at Playtech; this does not establish AppSec leadership. (LinkedIn, updated)[8] Team size estimate — Exact size not publicly available. Search query used: "Playtech application security team"; available results confirm an international team but provide no headcount. Estimated range: not reliably determinable from public information.[5] Active AppSec job postings — 1 directly identified: AI Security Engineer (Application Security). The Playtech jobs page also listed System & AI Security Engineer roles, but the page showed inconsistent vacancy-state information. (Playtech SmartRecruiters, updated; Playtech People jobs page, updated)[5][7] Common skill patterns — Threat modeling, security design reviews, secure code review, vulnerability management, cross-functional collaboration, programming or scripting, and analysis of AI/ML system failure modes. (Playtech AI Security Engineer job posting)[5] Common tool patterns — The posting refers generally to commercial and open-source security technologies but names no specific AppSec products. (Playtech AI Security Engineer job posting)[5]

Key Initiatives

  • Section 3 — Programs and workflows Security Champions program Found/not found — No publicly documented Security Champions programme was identified.
  • Shift-left in CI/CD Pipeline gates — Playtech describes SSDLC processes and technologies but does not publicly specify CI/CD gates, enforcement points, or developer tooling. (Playtech Trust and Assurance Statement)[9] Vulnerability management Intake sources — Playtech states that internal security testing identifies findings.
  • Other intake sources are not publicly specified. (Playtech Trust and Assurance Statement)[9] Ticket ownership — Playtech states that findings are recorded and remediation is tracked under vulnerability-management requirements, but does not identify ticketing ownership or systems. (Playtech Trust and Assurance Statement)[9] Secure SDLC ceremonies Playtech reports a secure software development lifecycle, proactive security testing, and remediation tracking, but does not publicly detail threat-modeling gates, architecture review boards, security sign-offs, or recurring ceremonies. (Playtech Trust and Assurance Statement)[9] New programs or tool rollouts in the last 6 months The AI Security Engineer posting indicates a current focus on securing AI-powered features, including LLM architecture reviews, adversarial testing, guardrails, monitoring, and AI security standards.
  • No named rollout or specific tool launch was publicly identified. (Playtech AI Security Engineer job posting)[5].

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on Playtech's site