DevSecOps Engineer

If it’s iGaming, we know a thing or two. At Light & Wonder, It’s all about the games, and our digital team leads the global iGaming market, providing jaw-dropping content and innovative software that powers the world's most successful online gaming providers.

DevSecOps Engineer

We are seeking a talented, motivated, and experienced DevSecOps Engineer to join our DevOps team. This role has a strong focus on embedding security practices and services across our cloud platforms, with a primary emphasis on AWS-based environments.

You will play a key role in ensuring the secure, reliable, and efficient delivery of software and services by integrating security controls throughout the entire software development lifecycle. You will work closely with architecture, development and security teams to design and operate secure-by-default cloud platforms.

What You’ll Be Doing

Cloud Security & Infrastructure

• Design, deploy, and maintain secure AWS environments. We’re using most AWS services, such as EC2, S3, IAM, ECS, EKS, MSK, RDS and edge security services.
• Implement and manage secure cloud infrastructure following best practices and security standards.
• Audit and monitor security groups, network ACLs, and other AWS security controls to protect sensitive data and systems.
• Participate in annual ISO audits, explaining our processes to external auditors?

Monitoring, Logging & Detection

• Implement proactive security monitoring and alerting using services such as AWS Security Hub, AWS CloudTrail, AWS Config, Amazon GuardDuty, and Amazon Inspector.
• Partner with the Information Security team to detect, investigate, and respond to security events, including forensic analysis when required.

Vulnerability & Patch Management

• Coordinate vulnerability scanning and patch management activities to reduce security risk.
• Work with external security vendors on penetration testing and security audits.
• Drive remediation of findings in collaboration with development and devops teams.

Security Incident Response

• Support the Information Security team during security incidents, including containment, investigation, and recovery activities.
• Willing to participate in a 24/7 on-call roster to support engineering teams during out-of-hours incidents.

Security Architecture & Enablement

• Collaborate with architects, information security teams, and development teams to embed security controls into our platforms.
• Review and provide guidance on secure design principles, secure coding practices, and secure deployment strategies.
• Advocate for security automation and “shift-left” security practices across the platform.

Qualifications

What We’re Looking For

Experience & Expertise

• Strong experience as a DevSecOps Engineer or similar role, with a focus on security in AWS. Containers and K8s experience is considered a bonus.
• In-depth knowledge of AWS services, security capabilities, security controls, and operational best practices.

Tooling & Technology

• Hands-on experience with:
  
  • AWS
  • Terraform
  • Ansible
  • GitHub Advanced Security

Security & Operations

• Knowledge of secure coding practices, API security, code scanning tools, and vulnerability management processes.
• Understanding of security frameworks and standards such as OWASP, NIST, and CIS, applied to both AWS and Kubernetes.
• Familiarity with DevOps principles and IT operations best practices (e.g. ITIL).

Soft Skills

• Strong collaboration and communication skills, with the ability to work across multiple teams. As a DevSecOps Engineer, you will collaborate closely with: Development teams, Information Security team, DevOps and Techops teams and Architects.
• A proactive mindset with a passion for improving platform security through automation and continuous improvement.

Why would you enjoy working with us at Light & Wonder?

• Competitive benefits, an open and supportive environment as well as a modern and exciting workplace
• The opportunity to interact with global teams on a regular basis
• Tangible and genuine development - at Light & Wonder, you can take your career where you want it to go!

And if that’s not enough; you will get to enjoy a stunning work location and flexible working practices whilst we provide you with the guidance and development skills you need to progress quickly and enhance your career.

#LI-Hybrid

#LI-iGaming