Senior Security Engineer
FairPlay Sports Media is building a tech-led, AI and data-powered sports media network that serves both owned brands and partners with BetTech products. At FairPlay scale, the Senior Security Engineer will work with multiple engineering teams to deliver reliable, compliant, high-throughput product execution.
This role requires a hands-on, pragmatic, DevSecOps-minded individual to own and evolve the security posture of the Google Cloud Platform environment. The engineer will work across infrastructure, platforms, and pipelines to level up InfoSec detection and response capabilities, harden the identity model toward Zero Trust, and build secure guardrails into infrastructure-as-code and delivery pipelines.
- Automate security guardrails, so developers can ship safe code fast.
- Audit, harden, and monitor the GCP footprint (including Security Command Center, IAM PoLP, Cloud Armor, encryption at rest with KMS, OS Login, GKE Network Policies for zero-trust, and remediating default service accounts).
- Integrate automated security scanning (SBOM, SAST, DAST) into GitLab pipelines, enforce policy-as-code across Terraform, route code-level vulnerabilities to owners, manage end-to-end secrets lifecycles (Google Secret Manager/KMS, rotation, access policies), and facilitate the remediation of hardcoded credentials by engineering teams.
- Define logging policies (including VPC Flow Logs for forensic visibility) and build security telemetry and reporting frameworks for real-time incident response.
- Implement and automate Shielded VM configurations (Secure Boot, vTPM) across the compute fleet and ensure IaC deployments enforce security best practices.
- Maintain and build developer-facing tools using Python, Go, and modern frameworks.
- Act as the primary technical interface with the MDR partner, ensuring seamless integration with internal NOC/SOC operations.
- Lead security operations, enforcing Zero Trust access management principles, and infrastructure incident response, driving rapid incident detection and leading internal incident command for high-severity threats.
- Collaborate with technical leadership to enhance InfoSec, DevSecOps and AppSec policies and standards.
- Own and evolve the end-to-end vulnerability scanning lifecycle and perimeter detection pipelines.
- Participate in a structured out-of-hours on-call rotation to lead incident response when required. All on-call duties and escalations are additionally compensated via callout pay.
- Conduct regular threat modelling sessions and architectural security reviews to identify and mitigate risks early in the development lifecycle.
- 5+ years in Security Engineering, Cloud Engineering, or SRE within a modern cloud environment (required).
- Deep hands-on expertise in GCP (IAM, Workload Identity, VPC, Org Policy, Security Command Center) and containerisation (Docker, Kubernetes) (required).
- Strong proficiency with Terraform and deep experience managing CI/CD pipelines (GitLab CI) to embed automated security guardrails (required).
- Proficiency in scripting and development (Python, Go, or Bash) to build internal security tools (required).
- Demonstrated ownership of incident response, detection engineering, vulnerability management, and WAF/DDoS mitigation (required).
- Practical experience designing least-privilege IAM and maturing architectures toward Zero Trust models (required).
- Relevant certifications (GCP Professional Cloud Security Engineer, GIAC, OSCP) (nice-to-have).
- Experience using the Google Cloud Architecture Framework (nice-to-have).
- Experience with Chronicle, Wiz, or comparable CNAPP/SIEM tooling (nice-to-have).
- Familiarity with compliance frameworks (SOC 2, ISO 27001) as engineering requirements (nice-to-have).
- Unlimited holiday plan.
- Pension scheme with up to 9% contribution from the company.
- Subsidised Sky HD package, broadband and discounted Sky Talk.
- £1,000 training fund each financial year, to spend on professional development.
- Free PureGym membership.
- Free healthcare with Bupa, life assurance and income protection.
FairPlay Sports Media is a global sports media network that builds and engages communities of sports fans and bettors to create value for its betting, advertising and media partners. Previously known as Oddschecker Global Media, it rebranded in 2024 and traces its origins to oddschecker, which launched in 1999. Its portfolio includes oddschecker, WhoScored, vime, the Confido Network and CasinoSmash, processing around 100 million data updates per week and reaching over 100 million unique users monthly. Headquartered in London, the group works with more than 100 partners worldwide.