Cyber Security Specialist

Bally's Interactive•Burley, ID

2d•Hybrid

About The Position

Bally’s Intralot is a newly formed company established through the combination of Intralot and Bally’s International Interactive, positioning the group as a top iGaming operator and a leading global provider of lottery solutions. Bally’s Intralot is uniquely positioned across digital online gaming markets, lottery, iLottery, and sports betting. Operating at the intersection of technology, regulation, and entertainment. We are optimally positioned to capitalize on strong global growth trends driven by digital adoption and regulatory expansion across lottery and iGaming markets. We're looking for a Cyber Security Specialist who thrives on protecting customer-facing platforms in a high-stakes, high-traffic environment. In this role, you'll be at the forefront of securing our B2C platforms that serve millions of customers globally, ensuring they can enjoy our services safely and securely. You'll work alongside IT, Privacy, Technology, Compliance, and Legal teams to build and maintain a security posture that protects sensitive customer data, payment information, and business operations. This isn't just about defending infrastructure—it's about securing the entire customer journey across web and mobile platforms, APIs, and cloud-native architectures. What makes this role exciting: Protect real-time, customer-facing platforms serving millions of users globally Work with modern cloud-native architectures and cutting-edge security technologies Tackle unique security challenges in the highly regulated iGaming and sports betting industry Collaborate with development teams to build security into products from the ground up Respond to and investigate sophisticated threats targeting high-value platforms Influence security architecture decisions for next-generation platform features

Requirements

Hands-on experience in security operations, platform security, or application security
Experience with security orchestration and automation (SOAR platforms, Python scripting for security tasks)
Exposure to threat intelligence and threat hunting methodologies
Strong understanding of web application security (OWASP Top 10, API security, authentication/authorisation)
Experience with cloud platforms and cloud-native security tools
Proficiency with SIEM platforms and log analysis
Knowledge of EDR/XDR solutions, endpoint protection, and security monitoring tools
Familiarity with vulnerability management platforms and remediation workflows
Understanding of security fundamentals: firewalls, IDS/IPS, DDoS mitigation, cryptography, packet analysis
Knowledge of payment security standards (PCI-DSS) and data protection regulations (GDPR)

Nice To Haves

Experience with container security (Docker, Kubernetes) and DevSecOps practices is a plus

Responsibilities

Monitor and protect customer-facing web and mobile platforms against threats including DDoS attacks, fraud attempts, and application-layer exploits
Implement and maintain security controls for APIs, microservices, and cloud infrastructure
Leverage SIEM, EDR, and security analytics tools to detect anomalous behaviour and potential threats
Perform security assessments of platform components, third-party integrations, and payment processing systems
Work with development teams to integrate security into CI/CD pipelines and ensure secure coding practices
Investigate security alerts and incidents affecting platform availability, data integrity, or customer privacy
Conduct forensic analysis on security incidents using modern toolsets and methodologies
Participate in 24/7 on-call rotation to ensure rapid response to security events
Document incidents and contribute to post-incident reviews and lessons learned
Develop and improve detection rules and playbooks based on MITRE ATT&CK framework and threat intelligence
Identify and prioritize vulnerabilities across platform environments using scanning tools and manual testing
Collaborate with engineering teams to remediate security findings and track remediation progress
Support compliance initiatives including PCI-DSS, ISO 27001, GDPR, and gaming regulatory requirements
Conduct internal security audits and assist with external audit preparations
Maintain security tooling including vulnerability scanners, WAF