Senior Application Security Analyst at Entain

Sofia, Sofia-City, Bulgaria -

Full Time

Start Date

Immediate

Expiry Date

09 Jul, 26

Salary

0.0

Posted On

10 Apr, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Application Security, Security Assessments, Penetration Testing, Code Review, Vulnerability Management, SAST, DAST, WAF, Java, C/C++, PHP, .NET, Python, Agile Development, Incident Response, Secure Coding

Industry

Entertainment Providers

Description

Company Description Sports betting, gaming and interactive entertainment is changing, and we're leading that change. By putting people first. By placing exciting, engaging and entertaining experiences at more fingertips than ever before. We're pulling into pole position by pushing boundaries further. With innovation. With technology. But most importantly, with people like you. Because when you join Entain, it's your game. So let's win together. Job Description The Senior Application Security Analyst responsible for conducting in-depth security assessments, identifying vulnerabilities, and implementing security controls to protect applications from potential threats. You will analyse application code and performing security testing. It also involves collaborating with development teams to improve security issues. You will play a necessary part in enhancing the security posture of applications and ensuring compliance with relevant security standards and regulations. Conduct comprehensive security assessments, code reviews, and penetration testing of applications to identify potential vulnerabilities and security risks. utilise industry-standard tools and methodologies to assess the security posture of applications and provide applicable recommendations for remediation. Identify security vulnerabilities identified during security assessments. Work with development teams to facilitate the remediation of vulnerabilities promptly. Monitor the effectiveness of remediation efforts and ensure that security vulnerabilities are addressed. Maintain security technologies used for application security testing and monitoring. Configure security tools such as static code analysis (SAST), dynamic application security testing (DAST), and web application firewalls (WAFs) to enhance the security posture of applications. and implement corrective actions to prevent future occurrences. Provide support during security incidents related to applications, including incident detection, analysis, and response. Collaborate with incident response teams to investigate security incidents, identify causes, Promote a culture of security awareness among development teams and stakeholders through training sessions, workshops, and awareness campaigns. Educate colleagues on secure coding practices, threat mitigation techniques, and compliance requirements. Maintain detailed documentation of security assessments, findings, and remediation efforts. Create regular metrics on application security activities, vulnerabilities, and compliance status to stakeholders and management. Collaborate with development teams, architects, IT operations, and security stakeholders to integrate security into the software development lifecycle. Identify opportunities for process improvement, optimization, and automation in application security practices. Stay up to date with new threats, vulnerabilities, and security trends in the application security landscape and recommend appropriate measures to mitigate risks. Qualifications Software Development Background At least five years experience in a similar Information Security position Customer-oriented person, with the ability to educate a technical audience on Application Security matters Fluent in relevant development languages (Java, C/C++, PHP, .NET, or Python …) Experience in the following areas: Security Test Management Application Security Assessments Security Assurance Requirements Management Knowledge of major frameworks and support libraries (SPRING, OSGI, ASP.NET) Agile Development Vulnerability management Continue Improvements Penetration Testing Security Evaluation & Functional Testing Application Security Testing Additional Information At Entain, we do what's right. It's one of our core values and that's why we're taking the lead when it comes to creating a diverse, equitable and inclusive future - for our people, and the wider global sports betting and gaming sector. However you identify, our ambition is to ensure our people across the globe feel valued, respected and their individuality celebrated. We comply with all applicable recruitment regulations and employment laws in the jurisdictions where we operate, ensuring ethical and compliant hiring practices globally. Equal Opportunities. If you need any reasonable adjustments at any stage of the recruitment process, please contact us and we'll support you. We're committed to creating a diverse, equitable and inclusive workplace where everyone feels valued, respected and able to be themselves. We're an equal opportunities employer. We welcome applications from everyone and we do not discriminate based on race, colour, nationality, ethnic or national origin, religion or belief, sex, gender identity or expression, sexual orientation, age, disability, marital or civil partnership status, pregnancy or maternity, or any other status protected by law. We comply with all applicable recruitment regulations and employment laws in the jurisdictions where we operate, ensuring ethical and compliant hiring practices globally. Advertising Department: Technology

Responsibilities

The Senior Application Security Analyst will conduct comprehensive security assessments, penetration testing, and code reviews to identify and remediate vulnerabilities. They will also collaborate with development teams to integrate security into the software development lifecycle and promote secure coding practices.