Lead, Application Security

Fanatics Momentum is building the UAE's leading regulated commercial gaming operator. Licensed by the General Commercial Gaming Regulatory Authority (GCGRA), we operate across lottery, iGaming, sportsbook, and digital content, combining Momentum's regional foundation with Fanatics' global product, technology, and scale. The business is ambitious, well-resourced, and moving fast. If you want to help build a category-defining operator in one of the world's most exciting regulated gaming markets, this is the right time to join.

Looking for a Lead, Application Security at Fanatics Momentum in Abu Dhabi, Abu Dhabi Emirate, United Arab Emirates? This role focuses on the day-to-day work of a Lead, Application Security.

About Fanatics Momentum Fanatics Momentum is building the UAE's leading regulated commercial gaming operator. Licensed by the General Commercial Gaming Regulatory Authority (GCGRA), we operate across lottery, iGaming, sportsbook, and digital content, combining Momentum's regional

Company Overview

Fanatics Momentum, headquartered in the UAE, is licensed by the General Commercial Gaming Regulatory Authority (GCGRA) to operate across lottery, iGaming, sportsbook, and digital content. Our foundation is Momentum, the regional experience and regulatory standing built over years of partnering with the UAE to shape one of the world's most carefully regulated commercial gaming markets. Our engine is Fanatics, a global digital sports platform with proven product depth, technology infrastructure, and operational scale from one of the world's most demanding regulated gaming environments. Together, we're building a business grounded in the UAE, with the ambition and capability to grow across the region and beyond with responsible gaming and player protection at the heart of everything we do.

Quick Details

• Salary Range: Not Specified
• Job Type: Full-time
• Qualifications: Bachelors Degree
• Experience: 8+ Year+

Key Responsibilities

• Own FanMo's application security testing capability across SAST, DAST, IAST, SCA, secrets detection, container scanning, infrastructure-as-code scanning, API security and mobile application testing.
• Manage the full lifecycle of application security platforms, including evaluation, implementation, integration, configuration, upgrades and ongoing optimization.
• Establish automated workflows to route findings to engineering teams, track remediation against agreed SLAs and verify closure.
• Build developer self-service capabilities, including IDE integrations, secure templates, approved base images and hardened libraries.
• Define and implement security controls for dependency management, artifact signing, provenance verification and Software Bill of Materials (SBOM) generation.
• Establish repeatable threat-modeling practices for application changes, scaled according to risk.

Requirements

• 8+ years of experience across software engineering, DevOps or cybersecurity, including at least 4 years of hands-on application security delivery.
• Proven experience owning and operating enterprise application security platforms such as HCL AppScan, Checkmarx, Veracode, Snyk, Wiz Code or GitHub Advanced Security.
• Strong hands-on experience across SAST, DAST, IAST, SCA, secrets detection and container scanning, including configuration and tuning at scale.
• Production-quality coding experience in at least one of Python, Go, Java/Kotlin, C# or TypeScript.
• Deep understanding of the OWASP Top 10 and OWASP API Security Top 10, with the ability to identify, exploit and remediate vulnerable code.
• Hands-on experience securing AI-assisted development environments, including AI coding assistants and agents.

Benefits

• Fair, transparent, and inclusive employer.
• Value diversity, collaboration, and innovation.
• Commitment to creating an environment where every team member can thrive.
• Opportunity to grow your career and help build Momentum.
• Help build a category-defining operator in one of the world's most exciting regulated gaming markets.