Information Security Engineer (maternity cover) at evoke · Trevo

Job description

About the role

We are looking for a hands-on Cyber Security Engineer to join our security team and help protect our organization across multiple layers of infrastructure and technology. In this role, you will be responsible for implementing, managing, and maintaining security controls across cloud and on-premises environments, networks, endpoints, applications, and data. You will work closely with the Security Architecture team, translating security standards and designs into effective operational controls. This is a highly practical role for someone who enjoys working with security technologies, solving real-world security challenges, responding to incidents, and continuously improving the organization's security posture. Bachelor's degree in Information Security, Computer Science, or a related field. Strong hands-on experience implementing security controls across perimeter, network, endpoint, application, and data security. Experience with at least one major public cloud platform: AWS, GCP, or Azure. Proven experience in security operations and incident response. Experience working with security technologies such as firewalls, WAF, DDoS protection, IDS/IPS, EDR, DLP, email security, and web proxies. Good understanding of cloud security, network security, endpoint security, and application security. Familiarity with regulatory requirements and security standards, including GDPR, PCI-DSS, and ISO 27001. Experience with CI/CD, IaC, Terraform, CloudFormation, or DevSecOps is a plus. Relevant certifications such as CISSP, CISM, or equivalent are a plus. A hands-on, proactive approach with the ability to investigate security issues, work across teams, and turn security requirements into practical solutions. *Please provide an English CV with your application. What we offer: Our roles offer more than just a job; you’ll become part of the evoke family! We have created an environment where our people can thrive. Check out some of the fantastic benefits on offer: Hybrid work model Free parking in the building + free electric car charging Broad collective health insurance (with options for family members and extensions) Birthday gift + day off during your birthday month Refer a friend - bonus or gift card HitechZone membership Gifts on holidays and life events Ten Bis More about evoke We’re a business that embraces change and progress. The power behind big-name brands William Hill, 888 and Mr Green, evoke is the new name for 888 Holdings. Marking a new sense of purpose, direction and ambition for the business, there couldn’t be a more exciting time to join us as we accelerate our journey to bring even greater delight to our customers with world-class experiences. That’s the future. That’s evoke. At evoke, you’ll benefit from flexibility and a culture built on trust. We’ll give you the space to be yourself and the tools you need to protect our customers while they play. We’ll invest in your future to help you develop your unique strengths and build a career that’s right for you. Apply At evoke, we prioritize diversity, equity, and inclusion for the benefit of our company, employees, and communities. We foster a welcoming and safe workplace that values all forms of diversity and provides growth opportunities. Sounds good? Then you belong at our place! The first step in the recruitment process is kickstarting your application, followed by an initial screening call and an interview stage. Apply today to kickstart your application with evoke!

What you'll do

Perimeter Security
Collaborate with the Security Architecture team to implement perimeter security controls designed to protect against unauthorized access and external threats.
Manage firewall policies and Web Application Firewalls (WAF) according to security architecture standards.
Operate security mechanisms designed to mitigate DDoS attacks and other external attack vectors.
Deploy and maintain cloud security guardrails and configurations across AWS, GCP, and Azure workloads.
Network Security
Implement network segmentation and enforce security policies across internal systems in collaboration with the Security Architecture team.
Manage email security solutions and protocols to protect against phishing, spam, and malware.
Implement and maintain mobile security solutions to protect devices and corporate data.
Manage web proxy configurations to control and monitor internet traffic and ensure secure web usage.
Operate Intrusion Detection and Prevention Systems (IDS/IPS) to identify and respond to potential threats.
Manage network patching processes to ensure systems remain up to date and protected against known vulnerabilities.
Endpoint Security
Implement and manage endpoint protection solutions to protect devices against malware, unauthorized access, and other threats.
Deploy and maintain Data Loss Prevention (DLP) and Endpoint Detection and Response (EDR) solutions in line with architectural standards.
Continuously assess and improve endpoint security posture and address identified vulnerabilities.
Application Security & DevSecOps
Work with development teams and Security Architects to integrate security best practices throughout the Software Development Lifecycle (SDLC).
Conduct security reviews and implement safeguards across code repositories, CI/CD pipelines, and applications.
Help enforce secure coding practices and application security standards defined by the Security Architecture team.
Experience with GitLab, GitHub, Azure DevOps, Infrastructure as Code (IaC), Terraform, or CloudFormation is a plus.
Experience working in a DevSecOps environment is a plus.
Data Security & Compliance
Implement encryption and data protection mechanisms to safeguard sensitive information.
Support compliance with relevant regulatory and industry standards, including GDPR, PCI-DSS, and ISO 27001.
Partner with the Compliance team on data security audits and implement preventive and corrective measures to reduce the risk of data leakage.
SOC & Incident Response
Configure security alerts, monitoring scenarios, and detection mechanisms within SOC tools according to Security Architecture guidelines.
Support the execution of incident response plans and procedures, ensuring security incidents are addressed quickly and effectively.
Participate in root cause analysis following security incidents and implement remediation strategies.
Conduct regular security assessments, audits, and testing to maintain operational readiness and continuously strengthen security controls.

About the role

What you'll do

Tech stack