Lead Offensive Security Architect

Caesars Entertainment; Las Vegas (NV); On-site; USD 140,000 - 210,000; Full time

Job summary

Caesars Entertainment is seeking an Information Security Senior Architect to build the offensive security foundation. The role involves threat research, security architecture design, and developing procedures for an advanced security team.

You will oversee pen testing engagements, manage bug bounty programs, and collaborate across IT to enhance the firm's cybersecurity posture, including PCI-DSS compliance and gaming-specific regulations.

Qualifications

• 3-5 years of cybersecurity with threat research focus.
• Experience with security tools like SIEM, firewalls, endpoint protection.
• Understanding of networking fundamentals and OS families.

Responsibilities

• Coordinate pen testing engagements with internal teams and vendors.
• Manage bug bounty programs and response cycles with business lines.
• Assist in policy and process development for Offensive Security.
• Perform threat research on industry threats and attack vectors.
• Conduct threat modeling to identify relevant threats to Caesars.
• Lead cross-team educational sessions on threats and security trends.
• Collaborate with IT and Security teams to improve security architecture and controls.
• Ensure penetration testing complies with PCI-DSS and gaming regulations.

Skills

Threat research

Penetration testing

Threat modeling

Policy development

Purple Team

PCI-DSS compliance

Security architecture

Networking fundamentals

Open Web Application Security Project

Tools

SIEM

Next-Gen Firewalls

Endpoint protection

Threat intelligence platform

Job description

Caesars Entertainment is seeking an Information Security Senior Architect to build the offensive security foundation. The role involves threat research, security architecture design, and developing procedures for an advanced security team.

You will oversee pen testing engagements, manage bug bounty programs, and collaborate across IT to enhance the firm's cybersecurity posture, including PCI-DSS compliance and gaming-specific regulations.