Security Architect

As a Security Architect, you will ensure that Entain creates, and operate its technology, platforms, and services with security embedded from the outset. You will provide architectural guidance, define security requirements, review change requests, conduct risk assessments, and produce reference architectures that help the organisation to innovate safely while maintaining a security posture. You will operate as part of a small, team. This team is the security conscience of the organization. It reviews network changes, onboards new projects, assesses new technologies, and maintains the security standards. All delivery teams must follow these security standards. You will be advisory and assurance-focused: you will work with engineering, infrastructure, and governance teams - guiding rather than building. Daily, you will review security-related changes across network, cloud, and hybrid environments. You will also evaluate application communication patterns and assess access for third-party access. Additionally, you will provide architectural guidance on broader security matters. Your expertise will help mitigate risks across both traditional infrastructure and cloud platform configurations, helping maintain the integrity and resilience of our environment. Join us in defending against cyber adversaries and safeguarding the future of our organisation.

• Review and approve security-related change requests (firewall rules, network changes, integrations, third-party access) within a 3-day Service level agreement with our service management tool.
• Onboard new projects using the structured intake process - assess security posture, identify applicable requirements, and route to appropriate our teams.
• Define and maintain security requirements for technology domains (agentic AI, MCP servers, container-based infrastructure, cloud, document storage, client devices).
• Produce and maintain security requirements and reference architectures.
• Conduct security risk assessments for technology changes, platform decisions, and new integrations.
• Be an Architect on Duty on a rotating weekly basis - being the primary contact for all incoming security consultations and change requests.
• Advise on identity and access management architecture, including privileged access, conditional access policies, MFA posture, and workload identities.
• Support audit and compliance activities by producing and maintaining security documentation, requirements, and evidence.
• Collaborate with other teams to ensure and coordinated security coverage across the organization.
• Support evaluation of security tooling and platforms and provide architectural oversight for their deployment.
• Stay current with the threat landscape and apply knowledge to update security standards, requirements, and architectural guidance.
• Support security incident investigations and attack path analysis and provide architectural context for containment decisions.
• Contribute to and build projects to implement the Group's Information Security strategy.

• At least two years' experience in a similar Information Security position (required).
• Experience as an architect in the field of information security or cybersecurity (required).
• Experience assessing network change requests (firewall rules, VPN configurations, network segmentation) (required).
• Define security requirements documents and translate risk appetite into applicable, auditable controls (required).
• Experience with security governance standards and processes, including risk assessments, compliance evidence and audit support (required).
• Experience designing security solutions, including on-premises, cloud-based, and containerization technologies, in a large-scale environment (required).
• Experience with security frameworks, risk management, regulatory and industry standards (e.g. ISO 27001, PCI-DSS, NIST, GDPR) (required).
• A thoughtful understanding of the current security threat landscape, risks, technical developments, and directions (required).
• Experience with cloud security architecture across AWS, GCP, or Azure, including identity federation, network segmentation, and security monitoring (required).
• Understanding of container security (required).
• Knowledge of the technical foundations behind networking, operating applications: Networking protocols such as TCP/IP, SMTP, SSH, RDP (required).
• Proficiency in operating systems (Windows, Linux) and familiarity with their security features (required).
• Understanding of network firewalls, reverse/forwarding proxies, load balancers, Web Application Firewalls, VPNs, and endpoint security solutions (required).
• Understanding of encryption technologies, cryptographic protocols, and main management (required).
• Experience with firewall policy management tools and SIEM platforms (required).
• Familiarity with using and securing (agentic) AI (required).
• Documentation skills - ability to produce clear, structured security requirements, reference architectures, and risk assessments (required).
• In possession of industry certifications such as CISSP, CISM, CEH, or similar qualification (nice-to-have).
• Experience with agentic AI security (OWASP Top 10 for Agentic Applications, MCP server security, AI governance) (nice-to-have).
• Experience with security documentation at scale (nice-to-have).
• Familiarity with the MITRE ATT&CK framework for mapping threats to controls (nice-to-have).
• Experience in an online gaming, betting, or similarly regulated environments (nice-to-have).
• Experience creating and evolving enterprise security strategies, driving ongoing program development to ensure security posture maintenance (nice-to-have).
• Basic knowledge of forensic analysis and incident investigation (nice-to-have).

• Salary of 40,000 EURO gross per annum depending upon experience.
• Group Bonus Plan.
• Private Medical Insurance – Personal Cover.
• Food vouchers – 150 BGN per month.
• Dental Allowance – 200 BGN per year, 100 BGN during probation.
• Annual Holiday – 25 days annually, plus local public holidays.
• Additional 'It's Your Game' day off.
• Entain & Enhance days – 2 paid days off to focus on your professional or personal development.
• Volunteering (2 additional days).
• Life Insurance.
• Personal Disability Insurance.
• Critical Illness Insurance.
• Multi-Sport Card – Self Contribution.
• Hybrid working – 2+ days in the office per week.
• Christmas bonus.
• Transport cost assistance.
• Utilities cost assistance.
• Sharesave Scheme.
• Paid subscription to the mental wellbeing app Unmind.

Entain is one of the world's largest sports betting and gaming entertainment groups and a FTSE 100 company. Formed when GVC Holdings rebranded as Entain in December 2020, its brands trace their history back to the 1880s and include bwin, Coral, Foxy, Gala, Ladbrokes and partypoker. Through its joint venture with MGM Resorts International, it powers BetMGM in the United States with its proprietary technology. Headquartered in London, Entain employs over 30,000 people with offices across 19 countries.

Read more about Entain →