DevSec Engineer
Betway Group5 months ago
London, United KingdomSenior
Responsibilities
- Integrate and operate SAST, DAST, software composition analysis, secrets detection, and dependency-risk scanning within CI/CD pipelines.
- Implement secure SDLC controls including branch protection, quality gates, secure build and release controls, and artifact integrity validation.
- Assist with threat modeling and secure design reviews and support developers with vulnerability triage and remediation.
- Tune security tools, maintain their integrations across repositories and CI/CD systems, and reduce false positives and developer friction.
- Implement and maintain container security across build, registry, and runtime environments.
- Support security incident investigations involving application flaws and ensure secure, compliant defaults for development teams.
- Define DevSec security standards, patterns, decisions, control mappings, audit evidence, and risk-remediation processes.
- Collaborate with engineering and cross-functional teams through technical leadership, security enablement, and cloud-native and container-security initiatives.
Requirements
- Strong grounding in application security, secure coding, OWASP Top 10, API security, dependency risk, SAST, DAST, SCA, and software supply-chain security.
- Hands-on expertise with containers and orchestration platforms such as Docker and Kubernetes, including demonstrated container-security implementation.
- Proven experience securing CI/CD pipelines and developer toolchains.
- Knowledge of infrastructure as code tools such as Terraform, Bicep, or CloudFormation; secrets and key management; and cloud identity and access management.
- Understanding of information security frameworks such as ISO 27001 and experience operating in regulated or audited environments.
- Ability to design auditable controls without slowing delivery and influence engineering teams through collaboration and technical credibility.
- Clear communication, strong organization, attention to detail, adaptability, teamwork, and the ability to manage multiple projects.
- Preferred experience includes sports betting or online gaming, gambling regulations, customer retention strategies, multinational or multi-team operations, audits, regulatory reviews, or formal assurance activities.
Benefits
- Learning and development programs, training, and career-growth opportunities.
- Performance management and feedback through the company’s Performance tool.
- Employee Assistance Programme resources for employees and their families.
Tech Stack
Categories
About Betway Group
Betway Group builds and operates online sportsbook, casino, and esports betting platforms for consumers, generating revenue from wagering and gaming. Its portfolio includes the Betway sports-betting brand and the Jackpot City online casino, and it supports operations through affiliated companies such as Win Technologies UK. Founded in 2006 and headquartered in Gzira, Malta, Betway is part of Super Group (NYSE: SGHC) and serves multiple regulated markets worldwide.