Senior Information Security Specialist

JR United Kingdom; Stoke-on-Trent; Hybrid; GBP 45,000 - 80,000; Full time

Job summary

An established industry player is seeking a Senior Information Security Specialist to enhance application security and code analysis. This role involves working closely with software development teams to identify and mitigate vulnerabilities throughout the development lifecycle. You will utilize both automated and manual testing methodologies, contributing to the security of various applications. The position offers a hybrid working environment, allowing for flexibility while ensuring compliance with regulatory obligations. If you have a passion for IT security and a strong background in application testing, this is an exciting opportunity to make a significant impact.

Qualifications

• Experience with application security and code analysis.
• Understanding of Secure Software Development Lifecycles.

Responsibilities

• Support technical leads and mentor junior team members.
• Conduct manual and automated source code reviews.
• Perform risk assessments and threat modelling.

Skills

Automated application security testing tools

Manual security testing

OWASP knowledge

Software development experience

CI/CD pipeline knowledge

Web Application Penetration Testing

Job description

Social network you want to login/join with:

Senior Information Security Specialist, stoke-on-trent

col-narrow-left

Client:

bet365

Location:

stoke-on-trent, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

05.05.2025

Expiry Date:

19.06.2025

col-wide

Job Description:

Who we are looking for

A Senior Information Security Specialist, who will focus on the technical side of IT Security, specifically looking at application security and code analysis to ensure applications are built securely.

The application security team deal with the security of closed source, open source and in house written applications. The objective is to ensure applications are developed in a way that is secure and compliant with the Company’s regulatory obligations.

You will be working closely with the software development function, to ensure that application based vulnerabilities are understood and mitigated. It is therefore important that you possess an understanding of the Secure Software Development Lifecycles and the assessment of code.

This role is part of the broader Information Security department, which is comprised of engineers and analysts with varying backgrounds. Collectively, the team utilises enterprise and bespoke tooling to identify and mitigate threats to safeguard the Business.

This role is eligible for inclusion in the Company’s hybrid working from home policy.

Preferred skills and experience

• Excellent understanding and demonstrable experience of automated, dynamic and static application security testing tools.
• Excellent understanding and experience with manual security testing to find vulnerabilities and logical issues.
• Knowledge and understanding of OWASP and its utilisation within threat modelling.
• Experience of software development and languages.
• Working knowledge of CI and CD pipelines and associated security tooling.
• Use of planned structured methodologies for conducting and reporting on Web Application Penetration Testing.

Main Responsibilities

• Providing support to technical leads and mentoring junior members of the team.
• Taking a lead role in the project process to ensure that information security aspects are considered up front and throughout the project lifecycle.
• Contributing to and utilising our security testing methodologies, creating and updating technical documentation as necessary.
• Conducting manual and automated source code review.
• Liaising with the software development function to ensure that security is considered throughout the lifecycle.
• Identifying and managing any security flaws within our software through appropriately liaising with external bodies where necessary.
• Performing risk assessments, threat modelling and design reviews to ensure effective security controls.
• Identifying opportunities for converting manual tasks into automated processes and identify tooling to support such automation.

By applying to us you are agreeing to share your Personal Data in accordance with our Recruitment Privacy Policy which can be found at https://content001.bet365.com/Careers/Documents/privacypolicy.pdf