Application Security Engineer

About Legend

We’re Legend. The team quietly building #1 products that make noise in the most competitive comparison markets in the world. iGaming. Sports Betting. Personal Finance. 

We exist to build better experiences. From amplified career paths to supercharged online journeys — for our people and our users, we deliver magic rooted in method. With over 500 Legends and counting, we’re helping companies turbocharge their brand growth in over 18 countries worldwide. 

If you’re looking for a company with momentum and the opportunity to progress at pace, Legend has it. 

Unlock the Legend in you. 

The Role

Join us in building the future of security at Legend. This role offers a unique opportunity to build and lead our security squad, laying the groundwork for heightened security awareness, best practices, and implementation across the organisation.

As part of our team, you'll play a pivotal role in elevating security consciousness throughout the company. Your efforts will directly contribute to enhancing the adoption of secure coding practices among developers and ensuring the ongoing security health of our products across all departments. Join us in driving a culture of security excellence and safeguarding our organisation's future.

In this role, we value diverse perspectives and encourage you to apply even if you don't meet every qualification listed.

Your Impact:

• Security Threat Monitoring: Chief responsibility for monitoring, documenting, and mitigating detected security threats.
• Resource Allocation and Management: Capable of effectively allocating and managing resources to implement security controls, achieving business goals through cost-effective solutions and minimising risk.
• Information Security Team Collaboration: Work within a newly established information security team with a broad organisational remit, ensuring secure operations within our AWS cloud infrastructure and other business functions.
• Security Procedures and Standards Development: Develop and implement security procedures and standards for organisation-wide use, providing threat assessments and implementing effective security controls.

What You'll Bring:

• Security Controls Design and Implementation: Strong experience designing and implementing security controls for public cloud services, primarily AWS.
• Penetration Testing and Security Improvement: Strong experience conducting penetration tests and helping improve the general security posture of web applications.
• Support for Secure Software Development Lifecycle (SSDLC): Experience supporting developers throughout the stages of the Secure Software Development Lifecycle.
• Security Incident Management: Ability to manage security incidents, including investigations and remediation.
• Security Policies and Procedures Development: Experience developing security policies, standards, and general standard/safe operating procedures (SOP).
• Exposure to Container Technologies: Exposure to containers and orchestration technologies, such as Docker and Kubernetes.

The Interview Process:

• 1st: Initial Chat with Talent Partner (30 mins via telephone)
• 2nd: Technical interview with 2 members of the Team (1 hour)
• 3rd: Take home task - you will be provided with a take-home task to complete
• 4th: Final interview to present task to 2 members of the team with a Q&A

Why Legend?

• Super smart colleagues to work alongside and learn from.
• Tailored flexibility for your work-life balance.
• Paid annual leave PLUS a well-deserved break to recharge your batteries during the festive season! Our offices are closed between Christmas and New Year's, allowing you to enjoy downtime without dipping into your annual allowance.

Unlock your full potential by joining the Legend team. To support you on this journey, we provide an extensive array of benefits and perks, as outlined in our global offerings above. For country specific benefits please reach out to your talent partner.