Cybersecurity Engineer - Authentication, Identity & Payments F/M

Welovedevs; Bordeaux; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Health insurance

Hybrid work model

Paid leave 25 days

Meal vouchers

Job summary

Betclic is seeking a Security Engineer to join the Global Security team and work within squads responsible for authentication, identity and payment journeys. You will be an embedded security partner from design through implementation, with hands-on security testing when needed.

Join a highly collaborative, international environment and influence security decisions from architecture to code. This role is based in Bordeaux with hybrid remote options and opportunities to grow in security domains.

Qualifications

• 3-5 years of cybersecurity experience focused on securing applications or digital products.
• Fluent in English both written and spoken.
• Experience collaborating with Product and Engineering teams in Agile environments.
• Knowledge of modern authentication and identity systems and security architecture.

Responsibilities

• Partner with squads to secure design reviews and threat modeling for new projects.
• Assess implementations, including code, APIs and controls, for vulnerabilities.
• Identify attack paths and validate them with controlled security testing or PoCs.
• Promote secure development practices and reusable security patterns across teams.
• Lead security initiatives across authentication and payment ecosystems.

Skills

Cybersecurity experience

English fluent

Web & API security

Tools

SAST

DAST

SCA

IaC scanning

Job description

WE ARE BETCLIC

Betclic, European leader in sports betting, is much more than just an online gaming site! Also offering Poker, Horse Racing, and Casino games across various countries and continents, it is an inspiring and forward-thinking company: every day brings new challenges in a modern and dynamic environment. As an influential player in the tech industry, with strong and sustained growth over the years, we believe in innovation through diversity and inclusion and encourage everyone to reach their full potential. With our multicultural team, we provide an optimal, safe and responsible gaming experience, powered by cutting-edge technology.

WHY JOIN US?

At Betclic, success comes from passionate and committed teams. Here’s why you’ll love working with us:

• An international and creative environment where every project is an opportunity to innovate
• Hypergrowth that brings new challenges and development opportunities every day
• A healthy work-life balance: flexible remote work and workplace well-being are essential pillars for us.
• A unique and friendly atmosphere, with 1,600 employees across 5 countries and our headquarters in Bordeaux

Are you passionate about sports and tech? Join us and help shape the future of online gaming!

ENTER THE GAME

As a Security Engineer, you will join Betclic’s Global Security team as a member of the Cybersecurity Referents team. You will work directly within squads responsible for authentication, identity and payment journeys.

You will act as an embedded security partner throughout the product lifecycle, from initial design and architecture discussions through implementation, security validation and continuous improvement.

This is a hands‑on role combining application security and architecture analysis. When relevant, you will also perform pragmatic offensive security testing. You will help teams identify relevant risks, implement effective security controls and deliver secure, reliable and user‑friendly experiences.

YOUR ROLE WITHIN BETCLIC

In this role, your main missions will be:

• Work closely with Developers, Architects, Product Managers and Engineering Managers within the squads,Conduct secure design reviews and threat modeling for new projects, and provide pragmatic and actionable security recommendations,Assess existing implementations, including source code, APIs and security controls, to identify vulnerabilities and opportunities for improvement,Identify realistic attack paths affecting critical user journeys, and validate them through controlled security testing or proof‑of‑concept exercises when necessary,Promote secure development practices and reusable security patterns, while supporting teams in implementing security improvements,Propose, lead and contribute to security initiatives across the authentication and payment ecosystems,Collaborate with the wider Security organization, including the Blue and Red Teams, as well as Compliance and Fraud teams.Why join this role?

Work on identity, authentication and payment journeys that are critical to Betclic’s users and business,Be embedded directly within the squads,Influence security decisions from architecture through implementation,Develop broad security expertise across architecture, application security, secure coding and offensive security,Identify and implement meaningful security improvements rather than only providing recommendations,Work in a highly collaborative and international environment.

TECHNOLOGY & SECURITY LANDSCAPE

Authentication and identity: MFA, passkeys, OIDC, SSO, IAM and session management,Security assessment: Threat modeling, architecture reviews, secure code reviews and controlled offensive testing,Security tooling: SAST, DAST, SCA, IaC scanning, secrets management and CI/CD security controls,Languages: You will encounter C#, Rust, Kotlin, Dart and Flutter,Payment security: Familiarity with payment service providers, tokenization, payment flows, fraud prevention and PCI DSS is a plus.

WHO ARE WE LOOKING FOR?

We are looking for passionate and curious professionals who bring kindness and a touch of enthusiasm!

This job is for you if:

• Have 3-5 years of experience in cybersecurity, with a focus on securing applications or digital products,Have experience working directly with Product and Engineering teams in an agile environment,Are comfortable analyzing both security architecture and implementation details,Understand the security principles behind modern authentication and identity systems,Are proactive and able to identify, propose and drive security improvements,Can communicate effectively with developers, architects, product managers and business stakeholders,Are fluent in English,Are interested in payment security and fraud prevention; prior experience in these areas is not required,Have experience with web and API security. Cloud experience with AWS or Azure is a plus, but not required.

WHAT ARE THE RECRUITMENT STEPS?

If your application is shortlisted, Sebastien or Maxime will contact you within a week for an initial HR screening (30 minutes). Then, you will complete the AssessFirst test (personality, motivation and cognitive reasoning).

Next, you will meet Philippe, Senior Security Referent Manager.

About two weeks later, you will take a technical test with one of our Security experts.

Finally, Sebastien or Maxime will conduct a final HR interview to review your AssessFirst results together.

The recruitment process usually takes between 4 to 6 weeks to ensure an optimal experience for you.

WHAT CAN YOU EXPECT?

• 25 days of paid leave and 10 RTT days
• A Ticket Restaurant® card credited with €11 per day (€6 per day funded by Betclic)
• 100% health insurance coverage for you and your children
• 50% reimbursement of public transport costs or an annual sustainable mobility allowance (€230 for commuting with sustainable transport)
• Hybrid work model
• Access to a vast training catalog, with opportunities for professional development every year
• Extraordinary office spaces with a rooftop where you can enjoy sunny breaks with a view of the Cité du Vin
• Internal events to liven up your daily life
• On-site sports classes and organized tournaments (Pilates, circuit training, boxing, yoga, futsal, padel, tennis…)

Permanent contract, available immediately in Bordeaux (remote from another city possible depending on profile - on-site presence required twice a month). Betclic Group – 117 Quai de Bacalan, 33300 BORDEAUX

Liste des technologies

• C#
• Kotlin
• Rust
• Flutter
• Azure
• Agile
• Dart
• CLOUD
• OIDC