Up to 30 days of Annual Leave
Internal International Opportunities
Learning and Development
Fully provisioned kitchen
Blip is a Tech and Innovation Hub with a strong knowledge in software development, mobile apps, web platforms and retail applications for betting and gaming.
We are part of Flutter Entertainment Group – one of the World´s Largest Groups in the bookmaking industry, with an annual revenue of around 5 billion euros.
Its strong and diverse portfolio of market-leading brands and best-in-class products provides excitement and entertainment in a safe and responsible way.
The Code we develop, powering brands such as Paddy Power, Sky Betting & Gaming, Betfair, Sportsbet, FoxBet, FanDuel, and PokerStars, is used by around 14 million people in more than 100 countries, and we are in the API Billionaire Club alongside players such as Google, Facebook and Twitter.
What You'll Be Doing…
The Paddy Power Betfair Cyber Security Team is a wide security team, with +60 people, covering a large spectrum of security areas of expertise. Its goal is to provide and ensure that proper security controls are protecting against risk across all businesses within the group. The successful candidate will be part of the Red Team and will have the opportunity to use technical skills and knowledge to simulate malicious actors activities with the purpose of identifying new vulnerabilities and contribute to PPB overall security posture.
The Red Team Engineer acts as a proactive Security Team member, combining an offensive mindset with a defensive goal. They design and execute real cyber-attacks against multiple targets with the purpose of achieving pre-defined goals. They also prepare technical and business oriented reports describing the red teams exercises, their results and mitigation recommendations. These are easily understood by technical and non-technical teams and have different format and content according to the stakeholders. Finally, they support technical teams in the mitigation procedures, helping them to understand the identified vulnerabilities, to design the best solutions and to validate their resilience against cyber-attacks.
The role involves a collaborative approach with multiple teams, dominating attacking techniques against different technologies and IT domains, and writing professional reports. Documenting the infrastructure is also an important part of the role, as all gathered information can be useful to other teams and future exercises. The offensive mindset should be present in the day-to-day tasks, staying up to date with new vulnerabilities and immediately analysing their potential impact in the company. Supporting the incident response team when offensive security actions are required is also expected.
In sum, you'll be leading properly defined and planned red team exercises, while also simulating threat actor activities in your day-to-day job. Responsibility is a key piece of this role, where you'll be responsible for any impact that you cause in the business, thus all attacks with potential impact to the business should be discussed with your manager.
What We're Looking For…
We'd love to see…