DevSec Engineer

This is a hybrid role requiring you 4 days on-site in Camden

Kick-start your career in the online gaming world and experience the very latest in technology and innovation.

Do you see yourself as one of those “out-of-the-box thinkers”, “Technical masterminds”, “Outstanding creatives”, or “Mind-boggling number crunchers”? If so, we want to welcome you to the Betway family and celebrate what makes you unique!

Our global customer base is exploding and we need your skills to support us on this exciting journey! Don’t look back and submit your application before the opportunity passes you by..

We’re Super Group, the NYSE-listed digital gaming company behind some of the world’s leading Sports and iGaming brands, including Betway and Jackpot City. We’re a powerhouse built on decades of expertise across 22 countries – and with over 2,800 bright minds, we’re changing the game for good. Our mission is to give our customers a superclass entertainment experience.

We’re on a thrilling journey of growth and innovation, and we need passionate, driven individuals to join us. At Super Group, every day is action-packed, and we expect you to bring your A-game. In return, you’ll find a supportive environment where your skills can flourish and your career can soar.

Ready to become a game-changer? Supercharge your career with us and be part of something extraordinary.

We’re building experiences that wow our customers – and that starts with bold, curious people who want to do work that matters.

If you’re hungry to grow, excited by impact and ready for a challenge that will supercharge your career, this could be your moment.

You’ll take ownership of work that gives us our competitive edge, including:

• Integrate and operate application security controls within CI/CD pipelines, including:
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Software Composition Analysis (SCA)
• Support secure SDLC practices such as:
• Branch protection and quality gates
• Secure build and release controls
• Artifact integrity and validation checks
• Assist with threat modelling and secure design reviews in collaboration with architecture teams.
• Support developers in vulnerability triage and remediation.
• Tune security tools to reduce false positives and developer friction.
• Support audit, compliance, and evidence generation activities.
• Participate in security incident investigation related to application flaws.
• Ensure secure, compliant approaches are the default and easiest options for development teams to adopt.
• Configure and maintain security tooling integrations within CI/CD systems (e.g. Git Hub Actions, Git Lab CI, Jenkins, Azure Dev Ops) under agreed architectural standards
• Ensure security controls operate consistently across teams and repositories.
• Define and document Dev Sec security standards, patterns, and decisions.
• Provide evidence and control mappings to support audits, risk assessments, and regulatory reviews.
• Identify and track Dev Sec‑related risks and technical debt, driving remediation through process improvements rather than manual controls.
• Stakeholder Collaboration
• Influence security outcomes through collaboration and technical leadership rather than enforcement.
• Contribute to security enablement, awareness, and uplift initiatives focused on cloud‑native and container security practices.

This list covers your core responsibilities – with plenty of room to stretch, explore and take on new challenges as we grow.

You’re someone who brings:

• Clear, confident communication (written and verbal), and the ability to breakdown complex ideas
• A collaborative mindset, working smoothly with cross‑functional teams to hit shared goals
• Strong organisational skills and the ability to manage multiple projects without dropping the ball
• Exceptional attention to detail and a commitment to high‑quality work
• Adaptability – you stay sharp, productive and positive in fast‑moving environments
• Strong grounding in application security concepts.
• Secure coding knowledge (OWASP Top 10, API security, dependency risk).
• Strong knowledge of SAST, DAST, SCA, and software supply‑chain…