Senior Security Engineer

TN United Kingdom; United Kingdom; On-site; GBP 60,000 - 100,000; Full time

Job summary

An innovative company in the gaming industry is seeking a Senior Security Engineer to enhance their information security. This role involves developing security tools, managing incident responses, and collaborating with cross-functional teams to ensure the secure operation of their digital platform. You will leverage your expertise in cloud security and DevSecOps practices to protect digital assets and improve security measures. Join a passionate team dedicated to fostering a secure gaming environment and making a significant impact in the esports community.

Qualifications

• Strong background in Security Engineering and cloud-focused roles.
• Experience with IaC tools and containerization technologies.
• Familiarity with Security compliance frameworks.

Responsibilities

• Develop and implement security tools and best practices.
• Lead incident response processes for significant security events.
• Conduct Security Assurance testing to identify vulnerabilities.

Skills

Cloud Security

Incident Response

Security Policies

Security Assurance Testing

Scripting (Python, Bash)

Containerization (Docker, Kubernetes)

DevSecOps Practices

Threat Analysis

Education

Bachelor's Degree in Computer Science or related field

Tools

Google Cloud Platform

Amazon Web Services

Terraform

SIEM

SOAR

Job description

Social network you want to login/join with:

At EFG (ESL FACEIT Group) we create worlds beyond gameplay where players and fans become a community. We pride ourselves in having a corporate social responsibility which is that “IT’S NOT GG (Good Game), UNTIL IT’S GG FOR ALL”. We are passionate about the culture we foster that ultimately helps to create and shape the world of esports, gaming tournaments, leagues, events and holistic ecosystems staged for our millions of players, fans, and heroes.
The goal of the Technology team is to establish the best tech platform in the gaming industry. They oversee all product-related technology within EFG, including scouting for innovative tech solutions, designing architectural frameworks, implementing best practices, devising effective tech strategies, fostering partnerships, and implementing seamless integrations.

As a Senior Security Engineer, you will be instrumental in advancing EFG’s information security by developing and implementing security tools, platforms, procedures, and best practices.

You thrive at driving security outcomes at a fast pace and cost-efficiently. Collaborating with Software Development Engineers, Infrastructure Engineers, and IT teams, you will ensure the secure, reliable, and efficient operation of our Digital Platform (FACEIT) and related products and services. You will be responsible for embedding security throughout the software development lifecycle, maintaining the security of our products, and proactively identifying and mitigating potential risks.

Your expertise will be essential in strengthening our security posture, protecting our digital assets, and enhancing our prevention, detection, and response capabilities to safeguard our products and business against security threats.

What will you do:

• Leverage a broad and current understanding of Security to define, create and roll out new protections for our Digital Platform and wider security ecosystem.
• Collaborate with cross-functional teams to improve overall security posture and awareness as well as articulate the business value of Security investments.
• Lead and manage the incident response process, acting as the Incident Lead for significant security events.
• Implement and manage security controls and best practices in both the Google Cloud Platform and Amazon Web Services environments.
• Develop and enforce security measures for cloud infrastructure, ensuring robust protection against threats.
• Champion DevSecOps practices by integrating robust security measures into CI/CD pipelines and infrastructure as code, while addressing security considerations within Domain-Driven Design frameworks to ensure end-to-end security and compliance throughout the software development lifecycle.
• Improve application security practices across the development lifecycle.
• Interact with the external Security community and Security researchers to keep our platform secure.
• Conduct Security Assurance testing on EFG’s Digital Platform and infrastructure to identify vulnerabilities and improve our security defenses.
• Conduct threat impact analysis and research to stay ahead of emerging threats.
• Manage response to ongoing threats, operating autonomously or engaging the relevant stakeholder(s) to keep the systems as secure as possible.
• Assist with Audit and Compliance assessments as and when required.

Requirements

• Strong Security background in Engineering and/or cloud-focused positions
• Capable of designing Security policies, procedures and best practices as well as rolling them out successfully across teams and technology
• Experience with Google Cloud Platform, with an ability to provide secure Cloud Architectures in a fast-paced technical environment
• Experience with IaC tools (e.g. Terraform)
• Experience with containerization and orchestration technologies (e.g. Docker, Kubernetes)
• Experience with scripting languages (e.g. Python, Bash)
• Experience with a modern programming language (e.g. Go, TypeScript)
• Good knowledge of Security tooling, frameworks and approaches (e.g. SIEM, SOAR, IPS/IDS, NIST, Vulnerability Management)
• Capable of implementing SecOps/DevSecOps practices from scratch, implementing, maintaining, and scaling them out across teams and the company
• Familiarity with Security compliance frameworks (e.g. NIST, ISO 27001, PCI DSS, GDPR)
• You are collaborative, keen to learn and quick to adapt

Additional information:

• This role may require travel from time to time for team get-togethers or specific partner engagements but should be minimal for the individual.