This role is remote, with one required visit to your designated home office per quarter.

Remote option is available for employees located in the following States: NJ, NY, GA, CO, FL, IL, IN, IA, MS, NV, PA, WV, Washington D.C., AZ, MD, LA, and MI (States subject to change at any time) 

Home Office: Las Vegas

Working with William Hill, you will be at the heart of the technological revolution with one of the world’s most trusted betting and gaming companies. William Hill deals with projects ranging from desktop or mobile casinos and betting sites, to name a few. We deal with more than 20 million users daily; impressed? You can be sure there are many more challenges waiting for you. 

When we say cutting edge, we mean it.  Here, you can work on highly reliable systems with low latency, much like the transactional systems of the best financial institutions, but…with the fun included. 

You will have access to development opportunities, including IT conferences, internal training, and lunch and learn sessions.  You will be part of a great working atmosphere, performing complex work in a collaborative team of amazing people, with forward-thinking managers.  You will have the opportunity to make an impact. 

As an Application Security Architect, you will collaborate with the application delivery and support teams to secure the William Hill sports book comprised of revenue generating web and mobile services hosted in collocation data centers and Amazon Web Services (AWS).

What You Will Do:

• Align people, process, and technology to pragmatically address application security risks leveraging a risk-based approach while emphasizing application and platform availability and performance.
• Coordinate third party architectural risk analyses that include threat modeling and reference the threat model to inform decisions about which controls to implement to effectively address risk.
• Perform requirements analysis and design of security features and functionality and advise product managers and software engineers during the build process.
• Collaborate with the application delivery team to perform requirements analysis and design security features and functionality.
• Perform manual code reviews of code that represents a material change to the way the solution performs authentication, authorization, and Accounting (AAA) as well as how data is secured at rest and in transit across trust boundaries.
• Establish secure coding standards leveraging CERT Secure Coding Standards, OWASP Proactive Controls, SANS SWAT Checklist, and/or SAFECode Fundamental Practice for Secure Software Development and educate software engineers on how to securely develop code without introducing security vulnerabilities.
• Evaluate and implement tactics, technics, and procedures to programmatically evaluate code for security related bugs during the pre-commit, commit, and acceptance phases of the Continuous Integration/Continuous Delivery (CI/CD) pipeline.
• Evaluate the results of security assessments, including, but not limited to web application security assessments, static and dynamic code analysis, as well as software composition analysis to determine the risk associated with the findings and to prioritize remediation work.
• Respond to requests for information with no unreasonable delay from secure compliance teams, internal auditors, and regulators in support of risk assessments, technology audits, and security assessments such as pen tests and architectural risk analyses.
• Collaborate with the Caesars Entertainment SOC to evaluate, investigate, and effectively respond to security events targeting web services and software components.
• Other duties as assigned

What You Will Need:

• 3+ years of work experience with secure coding with an emphasis on software product security, preferably within the context of Class III gaming (wagering) applications.
• Bachelor’s degree in Computer Science or equivalent technical experience desired.
• OSCP, OSCE, GWAPT, GWEB, and/or CASE designations desired.
• Excellent communication skills, both written and verbal
• Ability to remain calm and composed under pressure. High emotional intelligence.
• Comfortable implementing new strategies and staying updated on emerging technologies
• Successfully complete a background investigation, drug screen, and obtain gaming licenses in ALL jurisdictions deemed required by compliance

Essential Functions/Exposures:

• Must be able to sit, type, and talk on the phone for extended periods

More About Us…

William Hill US, now part of Caesars Entertainment, currently operates sports betting in 18 US jurisdictions, an industry-leading 13 of which offer online sports betting. The combined companies have operations in The Bahamas, Colorado, Delaware, Florida, Illinois, Indiana, Iowa, Michigan, Mississippi, Nevada, New Jersey, New Mexico, New York, North Carolina, Pennsylvania, Rhode Island, Tennessee, Virginia, Washington DC, and West Virginia. William Hill US is the licensed sports betting provider for numerous casinos in Mississippi and New Mexico and is the exclusive risk manager for the Delaware and Rhode Island sports lotteries. The combined companies have numerous league partnerships, including MLB, NBA, NHL, and NFL, as well as national media partnerships with CBS Sports and ESPN. Marking a major milestone in American sports history, William Hill US opened the William Hill Sportsbook at Monumental Sports & Entertainment’s Capital One Arena in May 2021, becoming the first ever sports betting venue to open within a US professional sports facility.

#LI-JB1