Location: London
Salary: neg

Company: betfair

Betfair, the world's first and largest betting exchange, is arguably Britain's greatest Internet success story and has become one of the biggest online trading operations in Europe since its launch in 1999. A key element of the company's success has been its ability to stay ahead of the power curve in its application of best and innovative security practices.

This role requires you to work within the Systems Security Team to perform duties relating to protection of the company and integrate good security practices throughout all aspects of the business. The environment is fast-paced and includes state-of-the-art functionality requiring a quick mind to understand and implement new concepts in a dynamic workplace.

Key Responsibilities / Duties:
• Architect and design security management solutions and capabilities
• When required monitor, investigate and respond to security incidents
• Participate in 3rd party due diligence security reviews
• Develop and maintain technical security standards and policies
• Act as a security design authority for the deployment of infrastructure technologies and solutions
• Contribute towards the development of secure architecture, design patterns and principles
• Assess Betfair technologies and services to ensure they are compliant with policy
• Perform Risk Assessments and security reviews as part of the SDLC process
• Where required maintain security appliances and services (e.g. IDS sensors) to ensure optimum security protection and performance
• Manage vulnerability assessments, penetration testing and compliance programs
• Research and evaluate security products and technologies
• Contribute towards the development of the Infosec strategic roadmap
• Assist with and respond to external regulatory obligations
• Participate in a team schedule to provide support to the business outside of normal work hours

Key Working Relationships:
• Information security team (Application Security, Compliance)
• IS and Engineering Teams (e.g. Linux, Unix , Windows and Networks)
• Architecture and Product Development
• Business Areas
• Vendor/Technology partners

Key Skills and Attributes:

Essential
• Proven enterprise security experience
• In-depth knowledge of global network design principle and technologies
• Exposure to Internet/Web Application technologies (e.g. Java, Tomcat)
• Extensive experience of security appliances, such as Firewalls, IDSs, WAF's
• Strong working knowledge of Linux, UNIX and Microsoft security in enterprise environments
• Experience with security threat and vulnerability management systems (e.g. Qualys, Skybox, Symantec)
• Ability to apply standard risk management principles and practices
• Current awareness of threats and vulnerabilities
• Incident response experience
• Experienced in producing technical documentation (e.g. designs, security standards)
• Ability to lead and work under own initiative
• Experience working within business critical environments (ideally gambling and gaming / high transactional eCommerce / financial services)

Desirable
• Certified Information Systems Security Professional (CISSP)
• Database security (particularly Oracle)
• Experience of DDoS mitigation solutions
• Content delivery and load balancing technologies (e.g. Netscaler)
• VPN design and deployment
• Knowledge of CISCO network technologies
• Certifications such as SANS GIAC, CCNA, MCSE, RHCSS
• ISO 27001 and/or PCI DSS experience
• Experience of ESM, Tripwire, SourceFire, Imperva
Ref: JP
Contact: Please Click On The Apply Online Button


Please note: We strongly recommend that you do not provide your bank account details or any other personal financial information when applying for a job. If you see a vacancy on IT Job Finder where the advertiser requests bank account details, please send an email to support@ITJobFinder.co.uk