bet365 Manchester, England, United KingdomOverviewSenior Information Security Specialist at bet365. The role focuses on securing the Company’s applications through best practice development lifecycle controls and performing penetration tests to assess the effectiveness of security measures.The Information Security department handles the security of closed sourced, open source and proprietary applications. The team ensures applications are developed and implemented securely, and is responsible for identifying and remediating risks through penetration testing. You will work with Software Development teams to understand and mitigate application-based vulnerabilities, utilizing Secure Development Lifecycles and code assessment.This role is based within the wider Information Security department, with engineers and analysts of varying backgrounds. The team uses enterprise and bespoke tooling to identify, mitigate threats, and safeguard the business. We leverage AI to enhance security processes and you will play a key role in adopting this technology to strengthen application security. The role is eligible for inclusion in the Company’s hybrid working from home policy.By applying to us you are agreeing to share your Personal Data in accordance with our Recruitment Privacy Notice - https://www.bet365careers.com/privacy-policyAt bet365, we’re committed to creating an environment where everyone feels welcome, respected and valued. If you need adjustments or accommodations to the recruitment process, please reach out.ResponsibilitiesFocus on securing the Company’s applications through best practice development lifecycle controls and perform penetration tests to assess the effectiveness of security measures.Work with Software Development teams to understand and mitigate application-based vulnerabilities using Secure Development Lifecycles and code assessment.Utilise knowledge of secure development practices and tooling to identify, mitigate and remediate risks in web applications and infrastructure.Collaborate with engineers and analysts within the Information Security department to identify and remediate threats and safeguard the business.QualificationsExcellent understanding and practical experience with manual security testing to find vulnerabilities and logical issues in web applications or infrastructure.Strong understanding of and experience with automated, dynamic and static application security testing tools.Knowledge and understanding of OWASP and its use within threat modelling.Experience of software development and languages.Working knowledge of CI/CD pipelines and security tooling associated with them.Demonstrated experience in using structured methodologies for conducting and reporting on web application penetration testing.Additional InformationTaking a lead role in ensuring information security is considered up front and throughout the project lifecycle.Contributing to and continuously improving penetration testing and red-teaming methodologies.Performing dynamic and static security testing of applications and infrastructure.Performing security code reviews and assisting with remediation.Partnering with software development teams to ensure security is considered throughout the development lifecycle.Contributing to and improving supply chain assurance processes by identifying flaws and vulnerabilities.Performing advanced risk assessments, threat modelling and design reviews to ensure effective security controls are in place.Identifying opportunities to automate manual tasks and identifying tooling to support automation.Providing support to technical leads and mentoring junior team members.We’re Never Ordinary and always striving to be better. If you need adjustments or accommodations to the recruitment process, contact us.DetailsSeniority level: AssociateEmployment type: Full-timeJob function: Information TechnologyIndustries: Gambling Facilities and Casinos #J-18808-Ljbffr