Senior Security Engineer

FairPlay Sports Media; Greater London; Hybrid; GBP 90,000 - 150,000; Full time

Benefits offered by this job

Sky HD package & broadband discount

Puregym membership

Healthcare with Bupa

Pension scheme

Training fund

Unlimited holidays

Job summary

FairPlay Sports Media is building a tech-led, AI-powered sports media network with real-time data and partner integrations. We seek a hands-on Senior Security Engineer to own security across Google Cloud Platform, IaC pipelines, and incident response.

You’ll harden identity toward Zero Trust, implement guardrails in IaC/CI/CD, and collaborate with engineering to deliver secure, scalable product execution. On-call duties with compensation apply.

Qualifications

• 5+ years in Security Engineering, Cloud Engineering, or SRE within a modern cloud environment.
• Deep hands-on expertise in GCP (IAM, Workload Identity, VPC, org policy, Security Command Center) and containerisation.
• Strong proficiency with Terraform and managing CI/CD pipelines to embed automated security guardrails.
• Proficiency in scripting and development (Python, Go, or Bash) to build internal security tools.
• Ownership of incident response, detection engineering, vulnerability management, and WAF/DDoS mitigation.
• Practical experience designing least-privilege IAM and maturing architectures toward Zero Trust.

Responsibilities

• Automate security guardrails to ship safe code quickly.
• Audit, harden, and monitor GCP footprint and security tooling.
• Integrate SBOM, SAST, DAST into pipelines and manage secrets lifecycle.
• Lead security operations, incident response, and 24/7 MDR coordination.
• Conduct threat modelling and architectural security reviews.

Skills

GCP containers

Terraform

CI/CD security

Python/Go scripting

Incident response

Zero Trust IAM

Security architecture

Tools

Docker

Kubernetes

GitLab CI

Job description

FairPlay Sports Media is an AI-driven, technology-led media network and BetTech infrastructure provider. Built on the 25-year legacy of oddschecker (founded in 1999), the group operates globally at the intersection of high-intent sports audiences, premium publishers and betting operators. By combining deep market expertise with technical proficiency, FairPlay Sports Media bridges the gap between sports content and sustainable monetisation. Its global infrastructure runs on a proprietary data platform built to process over one billion odds on peak days and cover more than 30,000 sporting events annually.

The company nurtures a portfolio of highly engaged, trusted brands, including oddschecker, WhoScored, SuperScommesse and Confido Network.

FairPlay Sports Media is a Bruin Capital company headquartered in London, UK, and has operations in North America and throughout Europe, supported by a global workforce of over 200 employees.

iGaming is one of the fastest-growing and most technologically innovative sectors, and we're on top of our game, powered by market-leading technology and driven by brilliant people.

We champion diversity and operate an open and inclusive culture while remaining focused, fast-paced, and always making sure to have fun along the way.

So why not join FairPlay Sports Media and be part of something bigger...

We’re flexible on remote working, but ideally, we’d like you to attend our London office once a month to meet the team. The role also includes an on-call rota of approximately 1 week every 5 weeks, with additional callout compensation.

Role Summary:

Why this role exists

FairPlay Sports Media is building a tech-led, AI and data-powered sports media network that serves both owned brands (e.g., oddschecker, WhoScored.com, SuperScommesse, and others) and partners with BetTech products spanning data, display, and predictive capabilities. At FairPlay scale - real-time data, high-frequency updates, and partner integrations - you’ll work with multiple engineering teams to deliver reliable, compliant, high-throughput product execution.

What you’ll do

We are looking for a hands-on, pragmatic, DevSecOps minded Senior Security Engineer to own and evolve the security posture of our Google Cloud Platform environment.

Comfortable working across infrastructure, platforms, and pipelines, you will level up our InfoSec detection and response capabilities, harden our identity model toward Zero Trust, and build secure guardrails into our infrastructure-as-code and delivery pipelines.

Key Responsibilities

Pillar 1: Engineering & Infrastructure Security

Automating security guardrails, so developers can ship safe code fast:

• GCP Infrastructure Security: Audit, harden, and monitor our GCP footprint (including Security Command Center, IAM PoLP, Cloud Armor, encryption at rest with KMS, OS Login, GKE Network Policies for zero-trust, and remediating default service accounts).
• SCA & Secrets: Integrate automated security scanning (SBOM, SAST, DAST) into GitLab pipelines, enforce policy-as-code across Terraform, route code-level vulnerabilities to owners, manage end-to-end secrets lifecycles (Google Secret Manager/KMS, rotation, access policies), and facilitate the remediation of hardcoded credentials by engineering teams.
• Logging & Observability: Define logging policies (including VPC Flow Logs for forensic visibility) and build security telemetry and reporting frameworks for real-time incident response.
• Workload & Host Hardening: Implement and automate Shielded VM configurations (Secure Boot, vTPM) across the compute fleet and ensure IaC deployments enforce security best practices.
• Internal Tooling & Automation: Maintain and build developer-facing tools using Python, Go, and modern frameworks.

Pillar 2: Security Operations

Protecting company assets and responding to threats:

• Vendor & Operational Oversight: Act as the primary technical interface with our MDR partner, ensuring seamless integration with internal NOC/SOC operations.
• InfoSec Operations: Lead security operations, enforcing Zero Trust access management principles, and infrastructure incident response, driving rapid incident detection and leading internal incident command for high-severity threats.
• Strategy & Principles: Collaborate with technical leadership to enhance our InfoSec, DevSecOps and AppSec policies and standards.
• Vulnerability & Perimeter Management: Own and evolve the end-to-end vulnerability scanning lifecycle and perimeter detection pipelines.
• Incident Response & On-Call: Working alongside our 24/7 MDR partner, this role takes part in a structured out-of-hours on-call rotation to lead incident response when required. All on-call duties and escalations are additionally compensated via callout pay.
• Threat Modelling: Conduct regular threat modelling sessions and architectural security reviews to identify and mitigate risks early in the development lifecycle.

What we’re looking for

Technical Skills & Experience

Must have

• Experience: 5+ years in Security Engineering, Cloud Engineering, or SRE within a modern cloud environment.
• GCP & Containers: Deep hands-on expertise in GCP (IAM, Workload Identity, VPC, Org Policy, Security Command Center) and containerisation (Docker, Kubernetes).
• IaC & Pipeline Security: Strong proficiency with Terraform and deep experience managing CI/CD pipelines (GitLab CI) to embed automated security guardrails.
• DevSecOps Automation: Proficiency in scripting and development (Python, Go, or Bash) to build internal security tools.
• Security Architecture & Ops: Demonstrated ownership of incident response, detection engineering, vulnerability management, and WAF/DDoS mitigation.
• Zero Trust & IAM: Practical experience designing least-privilege IAM and maturing architectures toward Zero Trust models.

Highly Desirable

• Relevant certifications (GCP Professional Cloud Security Engineer, GIAC, OSCP).
• Experience using the Google Cloud Architecture Framework.
• Experience with Chronicle, Wiz, or comparable CNAPP/SIEM tooling.
• Familiarity with compliance frameworks (SOC 2, ISO 27001) as engineering requirements.

Soft Skills

• Ownership & Effective Problem-Solving: You are a pragmatic engineer who takes initiative, pursues problems to resolution, and balances speed with a meticulous attention to detail.
• Resilience & Autonomy: You demonstrate high emotional intelligence, self-organisation, and self-direction.
• Communication & Collaboration: You are an overcommunicator who clearly explains security risks and solution options to developers and engineering leadership.

What you’ll get back from us:

Alongside being challenged daily and a real interest in your development, you will also receive:

• Subsidized Sky HD package, broadband and discounted sky talk
• Free Puregym membership
• Free healthcare with Bupa, life assurance and income protection
• Pension scheme with up to 9% contribution from the company
• £1,000 training fund each financial year, to spend on your professional development
• Unlimited holiday plan

Research shows that women and ethnic minorities are less likely to apply if they don’t meet every qualification. If you’re passionate about our purpose, determined to take on challenges, and eager to learn,

We’re committed to building a diverse and inclusive team, and to ensuring an accessible recruitment process.

• Equal opportunity employment
• Non‑discrimination in recruitment, compensation, development, and promotion
• Inclusive leadership and respectful workplace behaviors

If you need any accommodations during the recruitment process, please let us know.