Senior Security Engineer

FairPlay Sports Media is building a tech-led, AI and data-powered sports media network that serves both owned brands (e.g., oddschecker, WhoScored.com, SuperScommesse, and others) and partners with BetTech products spanning data, display, and predictive capabilities. At FairPlay scale - real-time data, high-frequency updates, and partner integrations - you’ll work with multiple engineering teams to deliver reliable, compliant, high-throughput product execution., * GCP Infrastructure Security: Audit, harden, and monitor our GCP footprint (including Security Command Center, IAM PoLP, Cloud Armor, encryption at rest with KMS, OS Login, GKE Network Policies for zero-trust, and remediating default service accounts).

• SCA & Secrets: Integrate automated security scanning (SBOM, SAST, DAST) into GitLab pipelines, enforce policy-as-code across Terraform, route code-level vulnerabilities to owners, manage end-to-end secrets lifecycles (Google Secret Manager/KMS, rotation, access policies), and facilitate the remediation of hardcoded credentials by engineering teams.
• Logging & Observability: Define logging policies (including VPC Flow Logs for forensic visibility) and build security telemetry and reporting frameworks for real-time incident response.
• Workload & Host Hardening: Implement and automate Shielded VM configurations (Secure Boot, vTPM) across the compute fleet and ensure IaC deployments enforce security best practices.
• Internal Tooling & Automation: Maintain and build developer-facing tools using Python, Go, and modern frameworks., * Vendor & Operational Oversight: Act as the primary technical interface with our MDR partner, ensuring seamless integration with internal NOC/SOC operations.
• InfoSec Operations: Lead security operations, enforcing Zero Trust access management principles, and infrastructure incident response, driving rapid incident detection and leading internal incident command for high-severity threats.
• Strategy & Principles: Collaborate with technical leadership to enhance our InfoSec, DevSecOps and AppSec policies and standards.
• Vulnerability & Perimeter Management: Own and evolve the end-to-end vulnerability scanning lifecycle and perimeter detection pipelines.
• Incident Response & On-Call: Working alongside our 24/7 MDR partner, this role takes part in a structured out-of-hours on-call rotation to lead incident response when required. All on-call duties and escalations are additionally compensated via callout pay.
• Threat Modelling: Conduct regular threat modelling sessions and architectural security reviews to identify and mitigate risks early in the development lifecycle., * Experience: 5+ years in Security Engineering, Cloud Engineering, or SRE within a modern cloud environment.

We are looking for a hands-on, pragmatic, DevSecOps minded Senior Security Engineer to own and evolve the security posture of our Google Cloud Platform environment.

Comfortable working across infrastructure, platforms, and pipelines, you will level up our InfoSec detection and response capabilities, harden our identity model toward Zero Trust, and build secure guardrails into our infrastructure-as-code and delivery pipelines., * GCP & Containers: Deep hands-on expertise in GCP (IAM, Workload Identity, VPC, Org Policy, Security Command Center) and containerisation (Docker, Kubernetes).

• IaC & Pipeline Security: Strong proficiency with Terraform and deep experience managing CI/CD pipelines (GitLab CI) to embed automated security guardrails.
• DevSecOps Automation: Proficiency in scripting and development (Python, Go, or Bash) to build internal security tools.
• Security Architecture & Ops: Demonstrated ownership of incident response, detection engineering, vulnerability management, and WAF/DDoS mitigation.
• Zero Trust & IAM: Practical experience designing least-privilege IAM and maturing architectures toward Zero Trust models.

Highly Desirable

• Relevant certifications (GCP Professional Cloud Security Engineer, GIAC, OSCP).
• Experience using the Google Cloud Architecture Framework.
• Experience with Chronicle, Wiz, or comparable CNAPP/SIEM tooling.
• Familiarity with compliance frameworks (SOC 2, ISO 27001) as engineering requirements.

Soft Skills

• Ownership & Effective Problem-Solving: You are a pragmatic engineer who takes initiative, pursues problems to resolution, and balances speed with a meticulous attention to detail.
• Resilience & Autonomy: You demonstrate high emotional intelligence, self-organisation, and self-direction.
• Communication & Collaboration: You are an overcommunicator who clearly explains security risks and solution options to developers and engineering leadership.

• Pension scheme with up to 9% contribution from the company
• Subsidised Sky HD package, broadband and discounted Sky Talk
• £1,000 training fund each financial year, to spend on your professional development
• Free PureGym membership
• Free healthcare with Bupa, life assurance and income protection