This role is remote, with one required visit to your designated home office per quarter.

Remote option is available for employees located in the following States: NY, NJ, CT, MA, PA, MD, WV, GA, FL, LA, MI, IA, IN, IL, MT, CO, NV, AZ, TX, and Washington D.C.(States subject to change at any time) 

Home Office: Las Vegas

Working with William Hill, you will be at the heart of the technological revolution with one of the world’s most trusted betting and gaming companies. William Hill deals with projects ranging from desktop or mobile casinos and betting sites, to name a few. We deal with more than 20 million users daily; impressed? You can be sure there are many more challenges waiting for you. 

When we say cutting edge, we mean it.  Here, you can work on highly reliable systems with low latency, much like the transactional systems of the best financial institutions, but…with the fun included. 

You will have access to development opportunities, including IT conferences, internal training, and lunch and learn sessions.  You will be part of a great working atmosphere, performing complex work in a collaborative team of amazing people, with forward-thinking managers.  You will have the opportunity to make an impact. 

As a cloud security engineer with an emphasis on public cloud and product security, you will collaborate with the William Hill application delivery and DevOps teams to effectively secure the hybrid environment comprised of Amazon Web Services (AWS) and collocation datacenters as well as the application delivery process, otherwise referred to as the Continuous Integration/Continuous Delivery (CI/CD) pipeline. You will also collaborate with the Caesars Entertainment Security Operations Center to respond to security events impacting the William Hill sports book comprised of revenue generating web, desktop, and mobile services.  

What You Will Do:

• Secure the CI/CD pipeline(s) leveraging a pragmatic and risk-based approach in collaboration with the application delivery and support teams to ensure that high-risk, exploitable vulnerabilities are effectively addressed before they are introduced to production.
• Automate security-oriented tasks and programmatically integrate via API, where technically feasible, tools designed to secure the CI/CD pipeline during the pre-commit, commit, acceptance, production, and operations acceptance phases to identify and effectively address security vulnerabilities as early in the application delivery process as technically feasible.
• Continuously evaluate cloud security posture ensuring that infrastructure-as-code scripts deploy secure environments and enforce a desired configuration state.
• Securely harden host operating systems and containers leveraging industry accepted standards such as the relevant Center for Internet Security Benchmarks.
• Participate and lead blameless postmortems when high-risk, exploitable vulnerabilities are identified during the commit and acceptance phases or escape to production and educate and inform application delivery and support teams regarding tactics, technics, and procedures to avoid them in the future.
• Respond to requests for information with no unreasonable delay from secure compliance teams, internal auditors, and regulators in support of risk assessments, technology audits, and security assessments such as pen tests and architectural risk analyses.
• Collaborate with the Caesars Entertainment SOC evaluate current public cloud logging and monitoring architecture and processes and recommend cost effective enhancements to secure business critical workloads hosted with public cloud service providers in containerized environments.
• Collaborate with the Caesars Entertainment SOC to evaluate, investigate, and effectively respond to security events targeting web services, containerized applications, and public/private cloud infrastructure in addition to cloud security posture assessment alerts.
• Collaborate with the Caesars Entertainment SOC to author and apply protection rules within commercial and open-source on-premises and cloud-based web application firewalls as well as host and network-based intrusion detection and prevention systems to detect, block, and/or log attacks against web services and containerized applications or null route attacks against cloud-based network infrastructure.
• Act as the liaison between the product team and the Caesars Entertainment SOC, which is responsible for continuous security monitoring, to ensure an effective and innovative deployment of technology and processes designed to effectively monitor product environments with an emphasis on security while maintaining availability and performance.
• Other duties as assigned

What You Will Need:

• 3+ years of work experience effectively securing traditional and containerized workloads as well as CI/CD pipelines.
• Bachelor’s degree or equivalent technical experience desired.
• Practical and proven automation skills with an emphasis on automating tasks and integrating solutions to secure cloud infrastructure and CI/CD pipelines.
• OSCP, OSCE, GWAPT, GPEN, GCSA, AWS Certified Solutions Architect – Associate, and/or AWS Certified Security - Specialty designations desired.
• Familiarity with GLI-33 event wagering system technology and security requirements.
• Excellent communication skills, both written and verbal
• Ability to remain calm and composed under pressure. High emotional intelligence.
• Comfortable implementing new strategies and staying updated on emerging technologies
• Successfully complete a background investigation, drug screen, and obtain gaming licenses in ALL jurisdictions deemed required by compliance

More About Us…

William Hill US, now part of Caesars Entertainment, currently operates sports betting in 18 US jurisdictions, an industry-leading 13 of which offer online sports betting. The combined companies have operations in The Bahamas, Colorado, Delaware, Florida, Illinois, Indiana, Iowa, Michigan, Mississippi, Nevada, New Jersey, New Mexico, New York, North Carolina, Pennsylvania, Rhode Island, Tennessee, Virginia, Washington DC, and West Virginia. William Hill US is the licensed sports betting provider for numerous casinos in Mississippi and New Mexico and is the exclusive risk manager for the Delaware and Rhode Island sports lotteries. The combined companies have numerous league partnerships, including MLB, NBA, NHL, and NFL, as well as national media partnerships with CBS Sports and ESPN. Marking a major milestone in American sports history, William Hill US opened the William Hill Sportsbook at Monumental Sports & Entertainment’s Capital One Arena in May 2021, becoming the first ever sports betting venue to open within a US professional sports facility.

#LI-JB1