Offensive Security Specialist
The Offensive Security Specialist executes a range of workstreams in delivering offensive security governance, contributing to planning, test scoping, and engagements with project teams and external testing teams to ensure Entain security capabilities withhold amidst a rapidly evolving cyber threat landscape.
Develop, implement, and maintain security testing strategies, roadmaps, policies, processes, technologies, and controls. Mentor Security Testing professionals and act as a technical resource. Champion and share knowledge of emerging trends and changes in security testing.
- Develop, implement, and maintain security testing strategies, roadmaps, policies, processes, technologies, and controls.
- Mentor Security Testing professionals and act as a technical resource.
- Champion and share knowledge of emerging trends and changes in security testing.
- Develop Red Teaming, Penetration Testing, Code Scanning, and Vulnerability Management policies and procedures.
- Validate security controls and incident response through offensive security operations.
- Enhance security and penetration testing techniques across projects.
- Execute threat intelligence-informed Red and Purple Team operations.
- Identify and communicate security findings and strategies to technical stakeholders and legal counsel.
- Define and execute penetration testing scopes aligned with certification and compliance requirements.
- Identify gaps and improvement areas in penetration testing, vulnerability remediation, and threat mitigation.
- Conduct threat, vulnerability, and risk analysis and provide mitigation and remediation guidance.
- Assess inherent and residual risks and communicate results effectively.
- Minimum 7 years of experience in a similar Information Security role (required)
- Experience in Vulnerability Management and Exposure Management (required)
- Experience in Penetration Testing of Web Applications, APIs, Cloud, and Infrastructure (required)
- Experience in Red Team Operations and Adversary Emulation (required)
- Experience in Purple Team Exercises and Security Control Validation (required)
- Experience in Risk Management and Threat Modelling (required)
- Experience in AI/LLM Security Testing (required)
- Experience in vulnerability research, exploit validation, and PoC development (required)
- Experience developing offensive security tools, automation, or open-source projects (required)
- Experience participating in bug bounty programs or responsible disclosure initiatives (required)
- Strong knowledge of Networking (TCP/IP), Linux, Windows, Active Directory/Entra ID, Web Technologies, and Cloud Platforms (AWS, Azure, GCP) (required)
- Proficiency in Python, PowerShell, or equivalent scripting languages (required)
- Excellent communication and stakeholder engagement skills (required)
- OSCP, OSEP, OSWE, CRTO, CRTP, GPEN, GXPN, CISSP, or equivalent certifications (required)
- Experience conducting intelligence-led Red Team operations (required)
- Strong knowledge of MITRE ATT&CK and threat-informed defence (required)
- Experience integrating systems and security tooling through APIs (required)
- Experience in Online Gaming Security (required)
- Experience in Application Security (required)
- Experience conducting Cloud Security Assessments (required)
- Knowledge of regulatory frameworks, including PCI-DSS and ISO 27001 (required)
- Safe home pickup and home drop.
- A regular bonus and great pension.
- 24 days annual leave.
- Extra paid leave, including wellbeing and development days.
- Life assurance and Income Protection.
- Private healthcare and wellbeing support.
- INR 3,000 per month Communication allowance.
- Up to INR 16,000 per year in Crèche expenses (children under 3).
Entain is one of the world's largest sports betting and gaming entertainment groups and a FTSE 100 company. Formed when GVC Holdings rebranded as Entain in December 2020, its brands trace their history back to the 1880s and include bwin, Coral, Foxy, Gala, Ladbrokes and partypoker. Through its joint venture with MGM Resorts International, it powers BetMGM in the United States with its proprietary technology. Headquartered in London, Entain employs over 30,000 people with offices across 19 countries.
