Application Security Specialist
This role works closely with the development teams to verify that our applications satisfy the defined security criteria, supporting the organisation on the secure design of our gaming platform and conducting reviews of the developed applications, while improving the automation of security in our development lifecycle.
- Conduct comprehensive assessments of applications to identify potential security risks and vulnerabilities.
- Utilise industry-standard tools and methodologies to perform security testing, code reviews, and penetration testing.
- Design and implement robust security architectures for applications, considering factors such as authentication, authorisation, encryption, and data protection.
- Ensure compliance with relevant security standards and regulations.
- Manage and maintain security tools and technologies used for application security testing and monitoring.
- Configure, deploy, and optimise security tools such as static code analysis (SAST), dynamic application security testing (DAST), and web application firewalls (WAFs) to enhance the security posture of applications.
- Promote a culture of security awareness among development teams and stakeholders.
- Provide training sessions and resources to educate colleagues on secure coding practices, threat mitigation techniques, and compliance requirements.
- Enforce security policies, standards, and controls for applications in alignment with organisational goals and regulatory requirements.
- Conduct regular audits and assessments to ensure compliance and mitigate risks.
- Collaborate closely with development teams, Product, IT operations, project managers, and other stakeholders to integrate security into the software development lifecycle.
- Provide guidance and support to ensure security considerations are addressed throughout the application development process.
- Proactively identify opportunities for improvement and optimisation of security controls, processes, and technologies.
- Respond promptly to security breaches, investigate root causes, and implement corrective actions to prevent future occurrences.
- Travel to Development centres.
- Software Development Background (required)
- At least 6 years experience in a similar Information Security position (required)
- Customer-oriented person, with the ability to educate and influence a technical audience on Application Security matters (required)
- Fluent in relevant development languages (Java, C/C++, Perl, PHP, .NET, Python …) (required)
- Experience in Security Test Management (required)
- Experience in Application Security Assessments (required)
- Experience in Security Assurance (required)
- Experience in Requirements Management (required)
- Knowledge of major frameworks and support libraries (SPRING, OSGI, ASP.NET, etc.) (required)
- Agile Development (required)
- Vulnerability management (required)
- Continues Improvements (required)
- Penetration Testing (required)
- Security Evaluation & Functional Testing (required)
- Application Security Testing (required)
- Open source projects (nice-to-have)
- Online Gaming security experience (nice-to-have)
- Regulatory and industry standards work: ISO27001, PCI-DSS, etc. (nice-to-have)
- Experience in Automation (nice-to-have)
- Relevant professional qualifications will be considered, although not a requirement, e.g. GIAC, CISA, CISM, CISSP, CEH, etc. (nice-to-have)
- Safe home pickup and home drop.
- A regular bonus and great pension.
- 24 days annual leave.
- Extra paid leave, including wellbeing and development days.
- Life assurance and Income Protection.
- Private healthcare and wellbeing support.
- INR 3,000 per month Communication allowance.
- Up to INR 16,000 per year in Crèche expenses (children under 3).
Welcome to Entain. Our journey as Entain began when we evolved from GVC Holdings on 9th December 2020, but our brands have been paving the way and making history since the 1880s. Today, we’re one of the world’s largest sports betting and gaming entertainment groups – a FTSE 100 company that is home to more than 25 widely recognised brands, such as bwin, Coral, Foxy, Gala, Ladbrokes and partypoker. But that’s just the beginning. We’re constantly broadening our horizons and expanding our global influence. For example, our partnership with MGM Resorts International has allowed us to make waves in the US by powering BetMGM with our bespoke and top-of-the-line technology. It’s with this unique technology that we’re revolutionising our industry, and we’re boldly working towards being THE world leader in sports betting and gaming. Really though, it’s the people that truly make us who we are. There’s over 30,000 of us around the world and counting, but we all play for the same team. We’re proud to promote a culture that shatters barriers to unite, and encourages uncompromised diversity of background, thought and experience. When we win, we win together. If you share our values and want to be part of the revolution, we want you on our team. With offices across 19 different countries, we have an excellent history of identifying and nurturing the finest talent on a global scale. We’re all about putting our customers at the heart of the action and, with us, you can help bring moments of excitement into people’s lives.