Incident Responder, Cyber Security - Flutter Functions

Flutterbe

United States

Hybrid

USD 45,000 - 79,000

Full time

8 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Hybrid & remote options

€1,000 per year for self-development

Company share scheme

25 days of annual leave per year

20 days per year to work abroad

5 personal days/year

Flexible benefits: travel, sports, HOB

Extended health, dental and travel ins

Well-being programmes

Career growth sessions

Udemy courses

Job summary

Betfair Romania Development is seeking a Senior Incident Responder to protect Flutter Group security. You will lead incident response, perform threat hunting, and analyze data to improve incident handling. You’ll work with cross-divisional teams and external experts to strengthen defenses across Flutter Functions.

The role supports hybrid and remote work options, focusing on collaboration with legal, management, and operations to ensure timely containment and reporting of security incidents.

Qualifications

Solid background in cyber security with incident management experience.
Strong report writing and communication skills.
Excellent stakeholder management and collaboration with cross-functional teams.
Familiarity with NIST 800-61 and incident handling best practices.
Experience with SIEM architectures and tools like Splunk/Elastic Stack.
Knowledge of the Cyber Kill Chain and incident response phases.
Certifications such as CISSP/CRISC/GCTI are advantageous.

Responsibilities

Contribute to cross-divisional incident management and investigation capabilities.
Develop and implement cross-divisional incident response frameworks and runbooks.
Conduct threat hunting and cross-divisional incident exercises.
Lead timely responses to security threats and incidents with team collaboration.
Coordinate incident containment, eradication and recovery measures across Flutter brands.
Create and present incident reports to stakeholders, documenting procedures.

Skills

Cyber security

Incident management

Stakeholder management

Report writing

Teamwork

NIST 800-61

SIEM

Splunk

Elastic Stack

Cyber Kill Chain

Tools

Splunk

Elastic Stack

Job description

Senior Incident Responder, Cyber Security - Flutter Functions, Hybrid & Remote Cyber Security Senior Specialist Betfair Romania Development is the largest technology hub of Flutter Entertainment, with over 2,000 people powering the world’s leading sports betting and iGaming brands. Exciting, immersive and safe experiences are delivered to over 18 million customers worldwide, from our office in Cluj-Napoca. Driven by relentless innovation and commitment to excellence, we operate our own unbeatable portfolio of diverse proprietary brands such as FanDuel, PokerStars, SportsBet, Betfair, Paddy Power, or Sky Betting & Gaming. Our Values: The values we share at Betfair Romania Development define what makes us unique as a team. They empower us by giving meaning to our contributions, and they ensure that we consistently strive for excellence in everything we do. We are looking for passionate individuals who align with our values and are committed to making a difference. Win together | Raise the bar | Got your back | Own it | Positive impact The Flutter Functions division is a key component of Flutter Entertainment, responsible for providing essential support and services across the organization. The division encompasses various corporate functions, including finance, legal, human resources, technology, and more, ensuring seamless operations and strategic alignment throughout the company. In this role you'll be responsible for incident response, threat hunting and data analysis to protect and maintain the overall Flutter Group security. You will also be responsible for the analysis, measurement, and reporting of divisional and cross-divisional security incident metrics. Another strength of yours will be maintaining excellent relationships with external and internal stakeholders and develop partnerships with external experts and companies in the area of expertise is a must have skill set for this role.

Задачи

Contribute to maintaining a robust cross-divisional incident management and investigation capability for Flutter Group to support the Flutter Technology defined outcomes.
Help develop an aligned approach to respond to cross-divisional incidents (e.g. framework, process, runbooks, war room, etc.).
Participate in development and implementation of incident containment procedures.
Perform periodical threat hunting and cross-divisional exercises on incident response and recovery.
Protect Flutter Group systems and information by having prompt responses to security threats and incidents; ability to act individually and as part of a team to resolve issues.
Perform cross-divisional incident management and ensure process and responsibilities are followed according to the internal framework and documentation.
Coordinate and support cyber incident identification, containment, eradication and recovery measures across Flutter Group brands and divisions.
Create reports and document all incident procedures, while periodically presenting the findings to the relevant stakeholders.
Coordinate with several areas during a security incident – legal, management, operations etc.
Analyse cyber incidents related data to solve issues and aid with improving incident handling procedures.
Give input on incidents to the cyber threat team and corelate to improve threat exposure.
Contribute to develop forensics investigation and e-Discovery capabilities to support Divisions and Flutter Functions.
Perform periodic reports and check compliance.

Требования

Building Support; we establish close relationships with our stakeholders, underpinned by trust, integrity and respect. We are able to build awareness, understanding and positive momentum behind the Group technology strategy, often without being in a position to assert authority. Objective; we are impartial and unbiased, ensuring equal treatment for all and that decisions taken are based on objective criteria. Collaborative; we work effectively and in partnership with our stakeholders on shared goals that align towards the achievement of the Group technology strategy. Adaptable; we understand and appreciate different and opposing perspectives on an issue and are able to adapt our approach in order to achieve a successful outcome. Strategic Thinking; we think about the big picture and use that perspective to support our divisions to achieve competitive advantage through greater agility, faster time to market and a better customer experience. Strategic Communication; we actively listen, provide constructive feedback and help others to consider new perspectives. A solid background in cyber security with extensive expertise in incident management Extensive experience of internal and external stakeholder management Strong report writing and communication skills. Solid Teamwork Skills - the ability to collaborate with others who are conducting research in the same, similar or different areas than is being investigated; Familiar with related publications such as: NIST 800-61 (incident handling) Good understanding of computer intrusion activities, incident response techniques, tools, and procedures Experience with SIEM architecture, and knowledge of Splunk, Elastic Stack or industry equivalent technology Working knowledge of the Cyber Kill Chain and Incident Response Phases Good understanding of industry's commonly accepted attackers' tools and strategies Relevant certifications are an advantage: CHIH, GCTI, CISSP, CRISC, CRESC

Условия