Senior Information Security Specialist

bet365; Manchester; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

Join a forward-thinking company as a Senior Information Security Specialist, where you'll focus on application security and code analysis. In this dynamic role, you will collaborate with software developers to mitigate vulnerabilities and ensure compliance with regulatory obligations. You'll be part of a dedicated team that employs innovative tools to safeguard the business from threats. This position offers the opportunity to lead security initiatives and mentor junior members, all while working within a hybrid model that supports a balanced work-life integration. If you're passionate about security and ready to make an impact, this is the role for you.

Qualifications

• Experience with automated and manual security testing tools is essential.
• Strong understanding of secure software development lifecycles is required.

Responsibilities

• Support technical leads and mentor junior team members.
• Conduct manual and automated source code reviews.
• Perform risk assessments and threat modeling.

Skills

Automated application security testing tools

Manual security testing

OWASP knowledge

Software development

CI/CD pipelines

Web Application Penetration Testing

Job description

A Senior Information Security Specialist, who will focus on the technical side of IT Security, specifically looking at application security and code analysis to ensure applications are built securely.

The application security team deal with the security of closed source, open source and in house written applications. The objective is to ensure applications are developed in a way that is secure and compliant with the Company’s regulatory obligations.

You will be working closely with the software development function, to ensure that application based vulnerabilities are understood and mitigated. It is therefore important that you possess an understanding of the Secure Software Development Lifecycles and the assessment of code.

This role is part of the broader Information Security department, which is comprised of engineers and analysts with varying backgrounds. Collectively, the team utilises enterprise and bespoke tooling to identify and mitigate threats to safeguard the Business.

This role is eligible for inclusion in the Company’s hybrid working from home policy.

Preferred skills and experience

• Excellent understanding and demonstrable experience of automated, dynamic and static application security testing tools.
• Excellent understanding and experience with manual security testing to find vulnerabilities and logical issues.
• Knowledge and understanding of OWASP and its utilisation within threat modelling.
• Experience of software development and languages.
• Working knowledge of CI and CD pipelines and associated security tooling.
• Use of planned structured methodologies for conducting and reporting on Web Application Penetration Testing.

Main Responsibilities

• Providing support to technical leads and mentoring junior members of the team.
• Taking a lead role in the project process to ensure that information security aspects are considered up front and throughout the project lifecycle.
• Contributing to and utilising our security testing methodologies, creating and updating technical documentation as necessary.
• Conducting manual and automated source code review.
• Liaising with the software development function to ensure that security is considered throughout the lifecycle.
• Identifying and managing any security flaws within our software through appropriately liaising with external bodies where necessary.
• Performing risk assessments, threat modelling and design reviews to ensure effective security controls.
• Identifying opportunities for converting manual tasks into automated processes and identify tooling to support such automation.

Seniority level

Mid-Senior level

Employment type

Full-time

Job function

Information Technology

Industries

Gambling Facilities and Casinos