Information Security Engineer

We’re the world’s leading sports technology company, at the intersection between sports, media, and betting. More than 1,700 sports federations, media outlets, betting operators, and consumer platforms across 120 countries rely on our know-how and technology to boost their business.

ABOUT US:

The Security Engineering squad is a group of security engineers with the clear mission to enable IT Security and Information Security processes by internally providing specialized services. The squad acts as an internal service provider supporting both security focused teams and other business units.

As Subject Matter Experts (SME), Security Engineers are required to be technically equipped to take over responsibility of services operated and offered internally. The services in scope currently cover typical SOC solutions (SIEM, NIDS, SOAR, WAF, etc.).

THE CHALLENGE:

• Take responsibility over a set of tool sets.
• Design, architect and implement technical solutions based on business requirements.
• Perform regular maintenance to mature the service setup and ensure a healthy state.
• Implement continuous improvements following business updates.
• Adapt the service based on self-driven recommendations and user requirements.
• Ensure service availability by continuous monitoring of resources, service usage and license utilization.
• Identifying opportunities to improve security services and monitoring.
• Act as a primary point of contact towards internal users in addition to conducting ongoing and on demand training internally.
• Ensure and maintain compliance of the toolsets in scope for the various audits (ISO, SOX, etc.).
• Conduct Proof of Concept/Value by researching technologies and evaluating vendors and products following industry best practices.
• Support product and vendor decisions with planning, implementation and documentation.
• Support your team members on their tasks.
• Maintain and develop detailed and up to date internal documentation.
• Contribute to the development and implementation of security governance in IT, ensuring application security principles are applied during design and into business as usual processes to reduce risk, drive adoption and adherence to policies, standards and guidelines by the wider business.
• Provide advice and guidance to other teams within the business on good practice and maintain relevant and current industry knowledge.

ABOUT YOU:

• 5+ years of experience working in a security operations environment, preferably in a security engineering role (or a related role, i.e. System Administrator with security responsibilities).
• Familiarity with cloud/virtualization technologies (AWS, GCP and K8s) and automation (ansible, puppet, terraform etc.).
• Understanding of fundamental security concepts and terminologies (CIA, basic cryptography knowledge etc.).
• Advanced scripting skills in Python, Bash, PowerShell etc.
• Advanced Network knowledge, including Firewall management.
• Familiarity with SIEM tools (Splunk, Elastic Stack etc.).
• Good knowledge of identified operating system platforms; routers, network protocols, and security architecture.
• Good knowledge of industry standard security tools for implementation, administration and usage.
• Advanced networking, analysis and security skills.
• Ability to work independently, to carry responsibility and to self-learn.
• Excellent oral and written communication skills for both technical and non-technical audiences.
• Fluency in English.

Desired Experience:

• Experience working in a Security Operations Centre or as a Security Engineer.
• Fluency in programming languages i.e. Python.
• Applied experience working with M365 security tools (MDATP, MS Defender for Identity etc.).
• A track record of technical delivery working within a fast paced and pressured environment.

Desired Qualifications, Education and Certifications:

• Advanced college coursework in Computer Science or Information Technology, or equivalent experience.
• Bachelor’s Degree in Computer Science, Information Technology, Information Security or similar, or equivalent industry experience.
• Industry certifications such as: CISSP/CISM, SANS GIAC Certifications, C.E.H/L.P.T, Other relevant certs.

OUR RECRUITMENT PROCESS:

• Initial Screening: A quick chat with our Talent Acquisition Partner to understand your background and expectations.
• Two Technical Interviews: Meet with the Technical team and later with the Hiring Manager to dive into your solution, as also discuss team fit.
• Onsite Interview: Meet with the local team and take a tour of our office for a final meet-and-greet.
• Final Steps: Receive feedback and, if successful, an offer!