DevSec Engineer

What you’ll do

• Development and Application Security‑by‑Design
• Integrate and operate application security controls within CI/CD pipelines, including:
  Static Application Security Testing (SAST);
  Dynamic Application Security Testing (DAST);
  Software Composition Analysis (SCA);
  Secrets detection and dependency risk scanning
• Support secure SDLC practices such as:
  Branch protection and quality gates;
  Secure build and release controls;
  Artifact integrity and validation checks
• Assist with threat modelling and secure design reviews in collaboration with architecture teams
• Support developers in vulnerability triage and remediation
• Tune security tools to reduce false positives and developer friction
• Support audit, compliance, and evidence generation activities
• Participate in security incident investigation related to application flaws
• Ensure secure, compliant approaches are the default and easiest options for development teams
• Configure and maintain security tooling integrations within CI/CD systems (e.g. Git Hub Actions, Git Lab CI, Jenkins, Azure Dev Ops) under agreed architectural standards
• Ensure security controls operate consistently across teams and repositories

• Define and document Dev Sec security standards, patterns, and decisions
• Provide evidence and control mappings to support audits, risk assessments, and regulatory reviews
• Identify and track Dev Sec‑related risks and technical debt, driving remediation through process improvements rather than manual controls
• Stakeholder collaboration to influence security outcomes through leadership

• Clear, confident communication (written and verbal), ability to breakdown complex ideas
• A collaborative mindset, working with cross‑functional teams to hit shared goals
• Strong organizational skills and the ability to manage multiple projects
• Exceptional attention to detail and a commitment to high‑quality work
• Adaptability in fast‑moving environments
• Strong grounding in application security concepts;
  Secure coding knowledge (OWASP Top 10, API security, dependency risk)
• Strong knowledge of SAST, DAST, SCA, and software supply‑chain security concepts
• Hands‑on expertise with containers and orchestration platforms (e.g. Docker, Kubernetes)
• Demonstrated experience implementing container security across build, registry, and runtime
• Proven experience securing CI/CD pipelines and developer tool chains
• Knowledge of Infrastructure as Code (Terraform, Bicep, Cloud Formation, etc.);
  Secrets and key management
• Cloud identity and access management;
  Solid understanding of information security frameworks (e.g. ISO 27001)
• Experience operating in regulated or audited environments;
  Able to design controls that are auditable without slowing delivery

• In-depth knowledge of sports betting markets, odds calculation, betting types and market trends
• Experience in online gaming or casino industry with understanding of player behaviour and regulations
• Familiarity with gambling regulations and compliance requirements; experience with audits or regulatory reviews
• Experience developing and executing customer retention strategies
• Experience operating at scale in multi‑team or multinational environments

• Learning and development programmes to level up fast
• Performance feedback to support your development
• Employee Assistance Programme and wellbeing resources