Senior Security Engineer

About Betfair Romania Development
Betfair Romania Development is the largest technology hub of Flutter Entertainment, with over 2,000 people powering the world's leading sports betting and iGaming brands. Exciting, immersive and safe experiences are delivered to over 18 million customers worldwide, from our office in Cluj-Napoca. Driven by relentless innovation and commitment to excellence, we operate our own unbeatable portfolio of diverse proprietary brands such as FanDuel, PokerStars, SportsBet, Betfair, Paddy Power, or Sky Betting & Gaming,

Our Values
The values we share at Betfair Romania Development define what makes us unique as a team. They empower us by giving meaning to our contributions, and they ensure that we consistently strive for excellence in everything we do. We are looking for passionate individuals who align with our values and are committed to making a difference.

Win together | Raise the bar | Got your back | Own it | Positive impact
About Flutter Functions
The Flutter Functions division is a key component of Flutter Entertainment, responsible for providing essential support and services across the organization. The division encompasses various corporate functions, including finance, legal, human resources, technology, and more, ensuring seamless operations and strategic alignment throughout the company.

Role Overview
Drive the implementation and optimization of application security controls across Flutter's development ecosystem. Serve as technical expert for SAST/SCA tools and vulnerability management processes.

Key Accountabilities & Responsibilities

• Tool Management (40%)

• Administer and optimize SAST / SCA / Secrets Scanning (ex Snyk, TruffleHog) platforms

• Develop custom integrations and automation
• Create and maintain security policies and rules

• Monitor tool performance and availability

• Vulnerability Management (30%)

• Design vulnerability remediation workflows

• Perform vulnerability analysis and risk assessment
• Create remediation guidance for development teams

• Track and report on vulnerability metrics

• Developer Enablement (20%)

• Create secure coding guidelines and training

• Support security champion program
• Conduct security reviews and consultations

• Build security tools and libraries

• Innovation (10%)

• Research new security tools and techniques

• Contribute to open source security projects
• Develop proof-of-concepts for process improvements

Skills, Capabilities & Experience Required

• 5+ years application security experience
• Strong programming skills in multiple languages
• Hands-on experience with SAST/SCA tools (Snyk preferred)
• Deep understanding of OWASP Top 10 and secure coding
• Experience with cloud security (AWS preferred)
• Bachelor's degree in Computer Science or equivalent experience
• Technical expertise and problem-solving
• Communication and collaboration
• Self-direction and initiative
• Continuous learning mindset
• Attention to detail

Benefits

• Hybrid & remote working options
• €1,000 per year for self-development
• Company share scheme
• 25 days of annual leave per year
• 20 days per year to work abroad
• 5 personal days/year
• Flexible benefits: travel, sports, hobbies
• Extended health, dental and travel insurances
• Customized well-being programmes
• Career growth sessions
• Thousands of online courses through Udemy
• A variety of engaging office events

Disclaimer
We are an inclusive employer. By embracing diverse experiences and perspectives, we create a lasting, positive impact for our employees, customers, and the communities we're part of. You don't have to meet all the requirements listed to apply for this role. If you need any adjustments to make this role work for you, let us know, and we'll see how we can accommodate them.

We thank all applicants for their interest; however, only the candidates who best meet the job requirements will be contacted for an interview.

By submitting your application online, you agree that your details will be used to progress your application for employment. If your application is successful, your details will be used to administer your personnel record. If your application is unsuccessful, we will retain your details for a period no longer than three years, to consider you for prospective roles within the company.