Security Engineer - Authentication, Identity & Payments F/M

Betclic Group; Bordeaux; Sur place; EUR 70 000 - 100 000; Plein temps

Avantages offerts par ce poste

25 days leave

RTT days

Meal card

Health insurance

Transport reimbursement

Hybrid work

Training program

Rooftop office view

Résumé du poste

Betclic Group is seeking a Security Engineer to join the Global Security team in Bordeaux. You will embed within squads responsible for authentication, identity and payment journeys, guiding secure design and implementation across the product lifecycle.

The role combines application security with architecture analysis and, when relevant, pragmatic offensive security testing. You will help teams implement strong controls for reliable, user‑friendly experiences.

Qualifications

• Experience securing applications or digital products.
• Experience working with Product and Engineering teams in Agile environments.
• Ability to analyze security architecture and implementation details.
• Understanding of modern authentication and identity systems.

Responsabilités

• Conduct secure design reviews and threat modeling for new projects.
• Assess source code, APIs and security controls to identify vulnerabilities.
• Identify realistic attack paths and validate them with testing or PoCs.
• Promote secure development practices and reusable security patterns.

Connaissances

Security architecture

Threat modeling

Secure coding

Communication

Outils

SAST

DAST

SCA

IAM

CI/CD security

Description du poste

WE ARE BETCLIC

Betclic, European leader in sports betting, is much more than just an online gaming site! Also offering Poker, Horse Racing, and Casino games across various countries and continents, it is an inspiring and forward-thinking company: every day brings new challenges in a modern and dynamic environment. As an influential player in the tech industry, with strong and sustained growth over the years, we believe in innovation through diversity and inclusion and encourage everyone to reach their full potential. With our multicultural team, we provide an optimal, safe and responsible gaming experience, powered by cutting‑edge technology.

WHY JOIN US?

• An international and creative environment where every project is an opportunity to innovate
• Hypergrowth that brings new challenges and development opportunities every day
• A healthy work-life balance: flexible remote work and workplace well-being are essential pillars for us.
• A unique and friendly atmosphere, with 1,600 employees across 5 countries and our headquarters in Bordeaux
• Are you passionate about sports and tech? Join us and help shape the future of online gaming!

ENTER THE GAME

As a Security Engineer, you will join Betclic’s Global Security team as a member of the Cybersecurity Referents team. You will work directly within squads responsible for authentication, identity and payment journeys.

You will act as an embedded security partner throughout the product lifecycle, from initial design and architecture discussions through implementation, security validation and continuous improvement.

This is a hands‑on role combining application security and architecture analysis. When relevant, you will also perform pragmatic offensive security testing. You will help teams identify relevant risks, implement effective security controls and deliver secure, reliable and user‑friendly experiences.

YOUR ROLE WITHIN BETCLIC

In this role, your main missions will be:

• Work closely with Developers, Architects, Product Managers and Engineering Managers within the squads,
• Conduct secure design reviews and threat modeling for new projects, and provide pragmatic and actionable security recommendations,
• Assess existing implementations, including source code, APIs and security controls, to identify vulnerabilities and opportunities for improvement,
• Identify realistic attack paths affecting critical user journeys, and validate them through controlled security testing or proof‑of‑concept exercises when necessary,
• Promote secure development practices and reusable security patterns, while supporting teams in implementing security improvements,
• Propose, lead and contribute to security initiatives across the authentication and payment ecosystems,
• Collaborate with the wider Security organization, including the Blue and Red Teams, as well as Compliance and Fraud teams.

WHY JOIN THIS ROLE?

• Work on identity, authentication and payment journeys that are critical to Betclic’s users and business,
• Be embedded directly within the squads,
• Influence security decisions from architecture through implementation,
• Develop broad security expertise across architecture, application security, secure coding and offensive security,
• Identify and implement meaningful security improvements rather than only providing recommendations,
• Work in a highly collaborative and international environment.

TECHNOLOGY & SECURITY LANDSCAPE

• Authentication and identity: MFA, passkeys, OIDC, SSO, IAM and session management,
• Security assessment: Threat modeling, architecture reviews, secure code reviews and controlled offensive testing,
• Security tooling: SAST, DAST, SCA, IaC scanning, secrets management and CI/CD security controls,
• Languages: You will encounter C#, Rust, Kotlin, Dart and Flutter,
• Payment security: Familiarity with payment service providers, tokenization, payment flows, fraud prevention and PCI DSS is a plus.

WHO ARE WE LOOKING FOR?

• Have experience in cybersecurity, with a focus on securing applications or digital products,
• Have experience working directly with Product and Engineering teams in an agile environment,
• Are comfortable analyzing both security architecture and implementation details,
• Understand the security principles behind modern authentication and identity systems,
• Are proactive and able to identify, propose and drive security improvements,
• Can communicate effectively with developers, architects, product managers and business stakeholders,
• Are fluent in English,
• Are interested in payment security and fraud prevention; prior experience in these areas is not required,
• Have experience with web and API security. Cloud experience with AWS or Azure is a plus, but not required.

WHAT ARE THE RECRUITMENT STEPS?

If your application is shortlisted, Sebastien or Maxime will contact you within a week for an initial HR screening (30 minutes). Then, you will complete the AssessFirst test (personality, motivation and cognitive reasoning).

Next, you will meet Philippe, Senior Security Referent Manager.

About two weeks later, you will take a technical test with one of our Security experts.

Finally, Sebastien or Maxime will conduct a final HR interview to review your AssessFirst results together.

The recruitment process usually takes between 4 to 6 weeks to ensure an optimal experience for you.

WHAT CAN YOU EXPECT?

• 25 days of paid leave and 10 RTT days
• A Ticket Restaurant® card credited with €11 per day (€6 per day funded by Betclic)
• 100% health insurance coverage for you and your children
• 50% reimbursement of public transport costs or an annual sustainable mobility allowance (€230 for commuting with sustainable transport)
• Hybrid work model
• Access to a vast training catalog, with opportunities for professional development every year
• Extraordinary office spaces with a rooftop where you can enjoy sunny breaks with a view of the Cité du Vin
• Internal events to liven up your daily life
• On-site sports classes and organized tournaments (Pilates, circuit training, boxing, yoga, futsal, padel, tennis…)

Permanent contract, available immediately in Bordeaux (remote from another city possible depending on profile - on‑site presence required twice a month). Betclic Group – 117 Quai de Bacalan, 33300 BORDEAUX