Cybersecurity Engineer – Data & Betting Platforms

WE ARE BETCLIC 🎯

Betclic, European leader in sports betting, is much more than just an online gaming site! Also offering Poker, Horse Racing, and Casino games across various countries and continents, it is an inspiring and forward-thinking company: every day brings new challenges in a modern and dynamic environment. As an influential player in the tech industry, with strong and sustained growth over the years, we believe in innovation through diversity and inclusion and encourage everyone to reach their full potential. With our multicultural team, we provide an optimal, safe and responsible gaming experience, powered by cutting-edge technology.

💡An international and creative environment where every project is an opportunity to innovate

📈Hypergrowth that brings new challenges and development opportunities every day

🏡A healthy work-life balance: flexible remote work and workplace well-being are essential pillars for us.

🌟A unique and friendly atmosphere, with 1,600 employees across 5 countries and our headquarters in Bordeaux

Are you passionate about sports and tech? Join us and help shape the future of online gaming!

ENTER THE GAME 🎮

As a Security Engineer, you will join Betclic’s Global Security team as a member of the Cybersecurity Referents team. You will work directly within squads responsible for authentication, identity and payment journeys.

You will act as an embedded security partner throughout the product lifecycle, from initial design and architecture discussions through implementation, security validation and continuous improvement.

This is a hands-on role combining application security and architecture analysis. When relevant, you will also perform pragmatic offensive security testing. You will help teams identify relevant risks, implement effective security controls and deliver secure, reliable and user-friendly experiences.

Your role will be to strengthen security across several business and technology domains at Betclic, with a focus on Data and Sports Betting. Working closely with Developers, Architects, Product Managers and Engineering Managers, you will:

• Conduct secure design reviews and threat modeling for new projects, providing pragmatic and actionable recommendations.
• Assess existing implementations—including source code, APIs, data flows and security controls—to identify vulnerabilities and opportunities for improvement.
• Identify realistic attack paths affecting critical business journeys and validate them through controlled security testing or proof-of-concept exercises when useful.
• Work with teams to implement security improvements, promote secure development practices and share reusable security patterns.
• Propose, lead and contribute to security initiatives that reduce risks across the Data domain and your assigned business domain.
• Collaborate with the wider Security organization, including the Blue and Red Teams, as well as Compliance and Fraud teams.

• Have 3–5 years of experience in cybersecurity, with a focus on securing applications or digital products.
• Have experience working directly with Product and Engineering teams in an agile environment.
• Have a solid understanding of software development practices and the challenges developers face.
• Are comfortable analyzing both security architecture and implementation details.
• Understand the security principles behind modern authentication and identity systems.
• Are proactive and able to identify, propose and drive security improvements.
• Can communicate effectively with developers, architects, product managers and business stakeholders.
• Have experience with web and API security. Cloud experience with AWS or Azure is a plus, but not required.
• Are fluent in English.

WHAT ARE THE RECRUITMENT STEPS? 📝

If your application is shortlisted, Sebastien or Maxime will contact you within a week for an initial HR screening (30 minutes). Then, you will complete the AssessFirst test (personality, motivation and cognitive reasoning).

Next, you will meet Philippe, Senior Security Referent Manager.

About two weeks later, you will take a technical test with one of our Security experts.

Finally, Sebastien or Maxime will conduct a final HR interview to review your AssessFirst results together.

The recruitment process usually takes between 4 to 6 weeks to ensure an optimal experience for you.

WHAT CAN YOU EXPECT? 🎁

✅ 25 days of paid leave and 10 RTT days

🍽️ A Ticket Restaurant® card credited with €11 per day (€6 per day funded by Betclic)

🩺 100% health insurance coverage for you and your children

🚆 50% reimbursement of public transport costs or an annual sustainable mobility allowance (€230 for commuting with sustainable transport)

🏡 Hybrid work model

📚 Access to a vast training catalog, with opportunities for professional development every year

🏢 Extraordinary office spaces with a rooftop where you can enjoy sunny breaks with a view of the Cité du Vin

🎉 Internal events to liven up your daily life

🏋️ On-site sports classes and organized tournaments (Pilates, circuit training, boxing, yoga, futsal, padel, tennis…)

Permanent contract, available immediately in Bordeaux (remote from another city possible depending on profile - on-site presence required twice a month). Betclic Group – 117 Quai de Bacalan, 33300 BORDEAUX

• Strengthen security across Betclic’s Data activities and a strategic business domain.
• Work directly with teams and influence security from architecture through implementation.
• Bring your software development experience to practical application security challenges.
• Help teams implement meaningful security improvements, rather than stopping at recommendations.
• Develop broad expertise across application security, data security, secure software engineering and business domains.
• Work collaboratively with the wider Security organization in an international environment.

TECHNOLOGY & SECURITY LANDSCAPE 💻

• Application security: Threat modeling, secure design reviews, source code and API reviews, and controlled security testing.
• Data security: Data flows, access rights, data exposure risks, and security controls for data processing and sharing.
• Technologies: You will encounter C#, Rust, Kotlin, Dart and Flutter. Experience with one or more of these technologies is an advantage.
• Secure delivery: CI/CD security controls, SAST, DAST, SCA, IaC scanning and secrets management.
• Business context: Experience working with data platforms , online betting or gaming products systems is a plus.

WHO ARE WE LOOKING FOR? 🔍

We are looking for passionate and curious professionals who bring kindness and a touch of enthusiasm!