Principal Security Engineer (iGaming)

Location: St Albans, United Kingdom; hybrid

Company

hirify.global is an award-winning online casino launched in 2018, operating a real-money gaming platform with more than 300,000 active players, payment flows, player data, an AWS-native platform, and AI-native technology.

What you will do

• Evaluate, deploy, configure, manage, and integrate enterprise security tooling including EDR/XDR, SASE/SWG, SIEM, email security, DLP, endpoint privilege management, application allowlisting, and identity platforms.
• Design and implement zero-trust, secure-by-default security architecture across AWS, SaaS, endpoints, networks, and identity.
• Build and maintain SIEM and EDR detections mapped to MITRE ATT&CK, reduce false positives, and automate response orchestration, access reviews, compliance checks, vulnerability reporting, and threat-intelligence enrichment.
• Lead end-to-end incident response, threat investigations, root-cause analysis, vulnerability management, remediation tracking, and security operations runbooks.
• Architect IAM and endpoint security controls covering SSO, MFA, SAML, OAuth, SCIM, conditional access, passwordless authentication, least privilege, macOS, Windows, hardening, patching, encryption, MDM, and device compliance.
• Implement technical controls, collect audit evidence, conduct threat modelling and risk assessments, maintain security documentation, and support security awareness activities for ISO 27001, SOC 2, Cyber Essentials, and GDPR.

Requirements

• 6+ years of experience in security engineering, enterprise security, or security operations.
• Deep hands-on experience deploying, configuring, managing, and troubleshooting EDR/XDR, SASE/SWG, SIEM, DLP, email security, endpoint privilege management, and MDM tools.
• Expert-level IAM knowledge covering SSO, SAML, OAuth, SCIM, conditional access, MFA, and passwordless authentication, with proven production zero-trust implementation.
• Experience leading end-to-end incident investigations, building playbooks, managing containment, and driving remediation for real-world incidents.
• Strong scripting and automation skills in Python, Bash, and PowerShell applied to detection engineering, security operations, and compliance automation.
• Experience implementing technical controls and producing audit evidence for ISO 27001, SOC 2, Cyber Essentials, or GDPR.
• Practical knowledge of MITRE ATT&CK, NIST CSF, CIS Controls, and OWASP security frameworks and threat methodologies.
• Experience securing cloud-native and SaaS-heavy environments; AWS experience is preferred.

Nice to have

• Experience in iGaming, fintech, or another heavily regulated industry, including gaming regulatory frameworks and player data protection.
• Application security, API security testing, secure SDLC, or product security experience in a platform-based business.
• Hands-on SIEM detection engineering, including correlation rules, dashboards, and alert tuning at scale.
• Experience with AWS GuardDuty, Security Hub, CloudTrail, Config, SSPM, CASB, or DLP platforms.
• Relevant senior certifications such as CISSP, CISM, GIAC, CySA+, CrowdStrike, or Netskope certifications, or an equivalent proven track record.
• Experience mentoring engineers and building technical capability.

Culture & Benefits

• Hybrid and flexible working environment with competitive pay.
• Additional leave days, birthday leave, and four weeks of parental leave.
• International health and life insurance, wellness incentives, and a growth allowance.
• Friendly, multinational, collaborative, and inclusive workplace.