Security Engineer
Job Ad: Security Engineer
Betfair Pty Limited is a disruptor bringing innovation and competition to the Australian sports betting industry while operating responsibly and following regulations to protect the community.
We're on the lookout for a Security Engineer to join our innovative security team at Betfair. With the support of our Security Manager, the objective of this role is to ensure maximum uptime, stability, and ongoing efficiency across our network. This position will play a part in identifying vulnerabilities, implementing controls, and monitoring our defenses with precision.
REQUIREMENTS
What you will bring
- Minimum 3 - 5 years in security and/or relevant industry experience.
- Strong knowledge of Microsoft Sentinel, including configuration, rule creation, analytics, automation, and incident investigation.
- Excellent attention to detail and be able to identify potential security risks and/or vulnerabilities.
- Excellent written and verbal communication skills.
- Ability to build and maintain strong relationships with staff and suppliers.
- Ability to collaborate with other team members and effectively communicate security risks to non-technical stakeholders.
- Ability to define work schedules and work to timelines with minimal supervision.
- Experience with XaaS (IaaS, PaaS, SaaS, DBaaS etc) platforms.
- Understand the basic security principles, including network security, data security, encryption, access control, and authentication.
- Understand the network protocols such as TCP/IP, DNS, HTTP, and SSL.
- Understand the ISO27001 certification.
- Understand the ISMS process.
- Understand the threat detection and prevention systems.
- Understand the management and protection of sensitive customer data.
- Understand the concepts to secure various XaaS to align with policies.
- Knowledge of the evolving security risks introduced by modern AI systems and how to mitigate them.
- Basic understanding of Infrastructure Operations with Expert Operational Skills in Data Centre, Network, Security, Server & Storage Management.
- Willingness to learn and keep up to date with the latest security trends, techniques, and technologies.
- Flexible approach to working and the ability to adapt to new challenges and uncertainty.
- Holds an ITIL certification.
Beneficial Knowledge and Experience (but not essential):
- Basic understanding of programming languages like Python, Bash, and Powershell and be able to write scripts to automate security-related tasks.
- Strong analytical skills and be able to troubleshoot security issues quickly and efficiently.
- Basic understanding of relevant security compliance regulations such as HIPAA, PCI-DSS, and GDPR.
- Basic understanding of cloud security best practices and be familiar with cloud platforms such as AWS, Azure, and GCP.
Some tasks include, but are not limited to:
- Create, review and update policies and procedures.
- Conduct regular security assessments and testing to identify vulnerabilities and measure the effectiveness of security measures.
- Develop and implement security controls to mitigate security risks and threats, such as firewalls, intrusion detection/prevention systems, antivirus software, and access control systems.
- Manage and, where possible, automate security controls and reporting (vulnerability management, system hardening, logging and monitoring, system integrity, honeypots, source code reviews).
- Lead the operation, tuning, and continuous improvement of Microsoft Sentinel, including analytics rule development, log onboarding, automated playbooks, and incident investigation workflows.
- Ensure Microsoft Sentinel is fully integrated with key systems, data sources, and security controls to maximise detection coverage and response capability.
- Security administration activities including (but not limited to) the support of Firewalls, Web Security Gateways, Secure Email Gateways, Virtual Private Networks (VPN), Intrusion Detection Systems (IDS), other Secure Gateways/Proxys, Routers and Switches.
- Respond to security incidents and breaches, including conducting root cause analysis, implementing corrective actions, and ensuring that appropriate steps are taken to prevent similar incidents from happening again.
- Develop and maintain security policies, procedures, frameworks, and guidelines to ensure that the organization is compliant with applicable regulations and standards, such as ISO 27001 and NIST.
- Provide guidance and support to business units to improve the security culture of the organization through security awareness and training programs.
- Collaborate with cross-functional teams, such as IT, compliance, and risk management, to ensure that security is integrated into all aspects of the business.
- Prepare and maintain quality management documentation for security administration systems.
- Operate support to business stakeholders with security-related inquiries.
BENEFITS
- Incredibly flexible working arrangements.
- Tailored leave options – competitive parental leave, cultural leave swap, volunteer leave, study leave etc.
- A genuine focus on personal and professional development - including a combination of incredible internal Leadership Development Programs, peer to peer learning and self-chosen learning opportunities.
- Up to $1,000 per year for you to choose how you spend through our much loved BestYou program.
- An ongoing commitment to Diversity and Inclusion.
- Supportive wellbeing initiatives including access to our Employee Assistance Program.
- A dedicated internal events team focused on bringing a mix of educational, social, celebratory, and philanthropic activities,
- A generous bonus scheme – if we win, you win! And we like to win
Interested?
We are committed to building a workplace where everyone can fulfill their full potential. We pride ourselves on fostering an environment where all employees feel welcome and included. We encourage people of all walks of life, abilities, and backgrounds to apply.
We are proudly a WORK180 endorsed employer for women. To learn more about our commitment to Diversity and Inclusion, please visit Betfair Australia on WORK180.
Studies show that women are likely to only apply for a job if they meet 100% of the criteria outlined in the job ad. Even if you don’t hit 100%, click apply! You never know where it may lead.
Interested in applying? Please click 'Apply now' and submit an up-to-date Cover Letter and Resume.
We are committed to responding to all candidates within four weeks of application. If you are successful, we will send you a video interview, followed by two rounds of interviews. References are great, but not critical. You will need to have eligible working rights for Australia.
We have a team full of passionate, energetic, great people, with a genuine determination to try and create a working environment that is safe and supportive for everyone. We even won the WORK180 award for two consecutive years for our commitment to employee support and safety, which we are very proud of. We are a strong data-driven business; using cutting edge and digital innovative marketing technology.
