Information Security Engineer (Maternity Cover)
888 is looking for a hands-on Cyber Security Engineer to join the security team and help protect the organisation across multiple layers of infrastructure and technology. In this role, the engineer will be responsible for implementing, managing, and maintaining security controls across cloud and on-premises environments, networks, endpoints, applications, and data.
The engineer will work closely with the Security Architecture team, translating security standards and designs into effective operational controls. This is a highly practical role for someone who enjoys working with security technologies, solving real-world security challenges, responding to incidents, and continuously improving the organisation's security posture.
- Collaborate with the Security Architecture team to implement perimeter security controls designed to protect against unauthorised access and external threats.
- Manage firewall policies and Web Application Firewalls (WAF) according to security architecture standards.
- Operate security mechanisms designed to mitigate DDoS attacks and other external attack vectors.
- Deploy and maintain cloud security guardrails and configurations across AWS, GCP, and Azure workloads.
- Implement network segmentation and enforce security policies across internal systems in collaboration with the Security Architecture team.
- Manage email security solutions and protocols to protect against phishing, spam, and malware.
- Implement and maintain mobile security solutions to protect devices and corporate data.
- Manage web proxy configurations to control and monitor internet traffic and ensure secure web usage.
- Operate Intrusion Detection and Prevention Systems (IDS/IPS) to identify and respond to potential threats.
- Manage network patching processes to ensure systems remain up to date and protected against known vulnerabilities.
- Implement and manage endpoint protection solutions to protect devices against malware, unauthorised access, and other threats.
- Deploy and maintain Data Loss Prevention (DLP) and Endpoint Detection and Response (EDR) solutions in line with architectural standards.
- Continuously assess and improve endpoint security posture and address identified vulnerabilities.
- Work with development teams and Security Architects to integrate security best practices throughout the Software Development Lifecycle (SDLC).
- Conduct security reviews and implement safeguards across code repositories, CI/CD pipelines, and applications.
- Help enforce secure coding practices and application security standards defined by the Security Architecture team.
- Implement encryption and data protection mechanisms to safeguard sensitive information.
- Support compliance with relevant regulatory and industry standards, including GDPR, PCI-DSS, and ISO 27001.
- Partner with the Compliance team on data security audits and implement preventive and corrective measures to reduce the risk of data leakage.
- Configure security alerts, monitoring scenarios, and detection mechanisms within SOC tools according to Security Architecture guidelines.
- Support the execution of incident response plans and procedures, ensuring security incidents are addressed quickly and effectively.
- Participate in root cause analysis following security incidents and implement remediation strategies.
- Conduct regular security assessments, audits, and testing to maintain operational readiness and continuously strengthen security controls.
- Bachelor's degree in Information Security, Computer Science, or a related field (required)
- Strong hands-on experience implementing security controls across perimeter, network, endpoint, application, and data security (required)
- Experience with at least one major public cloud platform: AWS, GCP, or Azure (required)
- Proven experience in security operations and incident response (required)
- Experience working with security technologies such as firewalls, WAF, DDoS protection, IDS/IPS, EDR, DLP, email security, and web proxies (required)
- Good understanding of cloud security, network security, endpoint security, and application security (required)
- Familiarity with regulatory requirements and security standards, including GDPR, PCI-DSS, and ISO 27001 (required)
- Experience with CI/CD, IaC, Terraform, CloudFormation, or DevSecOps (nice-to-have)
- Relevant certifications such as CISSP, CISM, or equivalent (nice-to-have)
- Hybrid work model
- Free parking in the building + free electric car charging
- Broad collective health insurance (with options for family members and extensions)
- Birthday gift + day off during your birthday month
- Refer a friend - bonus or gift card
- HitechZone membership
- Gifts on holidays and life events
- Ten Bis
888 is one of the world's leading online betting and gaming brands, operated by the London-listed group Evoke plc (formerly 888 Holdings). Founded in 1997, the business runs the 888casino, 888poker and 888sport brands and, after acquiring William Hill's international operations in 2022, became part of one of the largest online gambling groups in the world. It is headquartered in Gibraltar, with major operational hubs in Leeds, London, Malta, Bucharest, Sofia and Tel Aviv. The company develops much of its own gaming technology and operates across regulated markets in the UK, Europe, the Americas and Africa.