Senior Incident Responder, Cyber Security - Flutter Functions, Hybrid & Remote

-

About Betfair Romania Development​:

Betfair Romania Development is the largest technology hub of Flutter Entertainment, with over 2,000 people powering the world’s leading sports betting and iGaming brands. Exciting, immersive and safe experiences are delivered to over 18 million customers worldwide, from our office in Cluj-Napoca. Driven by relentless innovation and commitment to excellence, we operate our own unbeatable portfolio of diverse proprietary brands such as FanDuel, PokerStars, SportsBet, Betfair, Paddy Power, or Sky Betting & Gaming.

Our Values:

The values we share at Betfair Romania Development define what makes us unique as a team. They empower us by giving meaning to our contributions, and they ensure that we consistently strive for excellence in everything we do. We are looking for passionate individuals who align with our values and are committed to making a difference.

Win together | Raise the bar | Got your back | Own it | Positive impact

About Flutter Functions:

The Flutter Functions division is a key component of Flutter Entertainment, responsible for providing essential support and services across the organization. The division encompasses various corporate functions, including finance, legal, human resources, technology, and more, ensuring seamless operations and strategic alignment throughout the company.

Role Overview:
In this role you'll be responsible for incident response, threat hunting and data analysis to protect and maintain the overall Flutter Group security. You will also be responsible for the analysis, measurement, and reporting of divisional and cross-divisional security incident metrics.

Another strength of yours will be maintaining excellent relationships with external and internal stakeholders and develop partnerships with external experts and companies in the area of expertise is a must have skill set for this role.

Key Accountabilities & Responsibilities:

• Contribute to maintaining a robust cross-divisional incident management and investigation capability for Flutter Group to support the Flutter Technology defined outcomes.
• Help develop an aligned approach to respond to cross-divisional incidents (e.g. framework, process, runbooks, war room, etc.).
• Participate in development and implementation of incident containment procedures.
• Perform periodical threat hunting and cross-divisional exercises on incident response and recovery.
• Protect Flutter Group systems and information by having prompt responses to security threats and incidents; ability to act individually and as part of a team to resolve issues.
• Perform cross-divisional incident management and ensure process and responsibilities are followed according to the internal framework and documentation.
• Coordinate and support cyber incident identification, containment, eradication and recovery measures across Flutter Group brands and divisions.
• Create reports and document all incident procedures, while periodically presenting the findings to the relevant stakeholders.
• Coordinate with several areas during a security incident – legal, management, operations etc.
• Analyse cyber incidents related data to solve issues and aid with improving incident handling procedures.
• Give input on incidents to the cyber threat team and corelate to improve threat exposure.
• Contribute to develop forensics investigation and e-Discovery capabilities to support Divisions and Flutter Functions.
• Perform periodic reports and check compliance.

Skills, Capabilities & Experience Required:

• Building Support; we establish close relationships with our stakeholders, underpinned by trust, integrity and respect. We are able to build awareness, understanding and positive momentum behind the Group technology strategy, often without being in a position to assert authority.
• Objective; we are impartial and unbiased, ensuring equal treatment for all and that decisions taken are based on objective criteria.
• Collaborative; we work effectively and in partnership with our stakeholders on shared goals that align towards the achievement of the Group technology strategy. We foster a collaborative environment and assume the role of leader when required.
• Adaptable; we understand and appreciate different and opposing perspectives on an issue and are able to adapt our approach in order to achieve a successful outcome.
• Strategic Thinking; we think about the big picture and use that perspective to support our divisions to achieve competitive advantage through greater agility, faster time to market and a better customer experience.
• Strategic Communication; we are proactive and considered in our approach to stakeholder communications. We actively listen, provide constructive feedback and help others to consider new perspectives.

• A solid background in cyber security with extensive expertise in incident management
• Extensive experience of internal and external stakeholder management
• Strong report writing and communication skills.
• Solid Teamwork Skills - the ability to collaborate with others who are conducting research in the same, similar or different areas than is being investigated;
• Familiar with related publications such as: NIST 800-61 (incident handling)
• Good understanding of computer intrusion activities, incident response techniques, tools, and procedures
• Experience with SIEM architecture, and knowledge of Splunk, Elastic Stack or industry equivalent technology
• Working knowledge of the Cyber Kill Chain and Incident Response Phases
• Good understanding of industry's commonly accepted attackers' tools and strategies
• Relevant certifications are an advantage: CHIH, GCTI, CISSP, CRISC, CRESC

Benefits:

• Hybrid & remote working options
• €1,000 per year for self-development
• Company share scheme
• 25 days of annual leave per year
• 20 days per year to work abroad
• 5 personal days/year
• Flexible benefits: travel, sports, hobbies
• Extended health, dental and travel insurances
• Customized well-being programmes
• Career growth sessions
• Thousands of online courses through Udemy
• A variety of engaging office events                        

Disclaimer:

We are an inclusive employer. By embracing diverse experiences and perspectives, we create a lasting, positive impact for our employees, customers, and the communities we’re part of. You don't have to meet all the requirements listed to apply for this role. If you need any adjustments to make this role work for you, let us know, and we’ll see how we can accommodate them.

We thank all applicants for their interest; however, only the candidates who best meet the job requirements will be contacted for an interview.

By submitting your application online, you agree that your details will be used to progress your application for employment. If your application is successful, your details will be used to administer your personnel record. If your application is unsuccessful, we will retain your details for a period no longer than three years, to consider you for prospective roles within the company.