Job Description
As a Senior Information Security Specialist, you will focus on securing the Company’s applications through best practice development lifecycle controls and perform penetration tests to assess the effectiveness of security measures.
The Information Security department deal with the security of closed source, open source and proprietary applications. The team ensure applications are developed and implemented in a secure manner, as well as being responsible for identifying and remediating risks efficiently through penetration testing.
Utilising your knowledge of Secure Development Lifecycles and code assessment, you will work with the software development teams to understand and mitigate application-based vulnerabilities.
This role is based within the wider Information Security department, with engineers and analysts of varying backgrounds. Collectively, the team utilises enterprise and bespoke tooling to identify, mitigate threats, and safeguard the Business.
We utilise AI to enhance our existing security processes and practices, embracing the advantages it brings. You will play a key role in our journey to leverage this powerful technology in strengthening our application security.
This role is eligible for inclusion in the Company’s hybrid working from home policy.
Qualifications
* Excellent understanding and practical experience with manual security testing to find vulnerabilities and logical issues, in either web applications or infrastructure.
* Strong understanding of and demonstrable experience with automated, dynamic and static application security testing tools.
* Knowledge and understanding of Open Web Application Security Project (OWASP) and its utilisation within threat modelling.
* Experience of software development and languages.
* Working knowledge of CI/CD pipelines and security tooling associated with them.
* Demonstrative experience in using structured methodologies for conducting and reporting on web application penetration testing.
* Excellent documentation skills.
* Strong communication skills.
Additional Information
* Taking a lead role in the project process to ensure that information security aspects are considered up front and throughout the project lifecycle.
* Contributing to and continuously improve our penetration testing and red teaming methodologies.
* Performing dynamic and static security testing of our applications and infrastructure.
* Performing security code reviews and providing help with remediation.
* Partnering with software development teams to ensure security is considered throughout the development lifecycle.
* Contributing to and continuously improve the Company’s supply chain assurance processes identifying flaws and vulnerabilities.
* Performing advanced risk assessments, threat modelling and design reviews to ensure effective security controls are in place.
* Identifying opportunities for converting manual tasks into automated processes and identify tooling to support such automation.
* Providing support to technical leads and mentor junior members of the team.
By applying to us you are agreeing to share your Personal Data in accordance with our Recruitment Privacy Notice - http://www.bet365careers.com/privacypolicy.pdf
At bet365, we're committed to creating an environment where everyone feels welcome, respected and valued. Where all individuals can grow and develop, regardless of their background. We're Never Ordinary, and we're always striving to be better. If you need any adjustments or accommodations to the recruitment process, at either application or interview, please don’t hesitate to reach out.