Technical Security Referent Engineer F/M

WE ARE BETCLIC

Betclic, European leader in sports betting, is much more than just an online gaming site! Also offering Poker, Horse Racing, and Casino games across various countries and continents, it is an inspiring and forward-thinking company: every day brings new challenges in a modern and dynamic environment. As an influential player in the tech industry, with strong and sustained growth over the years, we believe in innovation through diversity and inclusion and encourage everyone to reach their full potential. With our multicultural team, we provide an optimal, safe and responsible gaming experience, powered by cutting-edge technology. 

WHY JOIN US?

At Betclic, success comes from passionate and committed teams. Here's why you'll love working with us: 

An international and creative environment where every project is an opportunity to innovate 

Hypergrowth that brings new challenges and development opportunities every day 

A healthy work-life balance: flexible remote work and workplace well-being are essential pillars for us.

A unique and friendly atmosphere, with 1,600 employees across 5 countries and our headquarters in Bordeaux 

Are you passionate about sports and tech? Join us and help shape the future of online gaming! 

ENTER THE GAME

As a member of the Cybersecurity Referents team, you will join the Global Security teams to strengthen the security of Betclic's authentication and payment ecosystems.
You will act as a key security partner for Product, Engineering, Fraud, and Compliance teams, ensuring that security is embedded into critical user journeys while maintaining the right balance between user experience, business performance, and security requirements.
Your scope will focus on securing authentication mechanisms, account management processes, and payment flows across Betclic platforms in a fast-paced and highly innovative environment.

YOUR ROLE WITHIN BETCLIC

In this role, your main missions will be:

• Conduct security risk assessments for authentication and payment-related projects in an agile environment
• Identify threats, vulnerabilities, and fraud scenarios impacting critical user journeys such as login, account management, and payment flows
• Support Product and Engineering teams in designing secure authentication and payment mechanisms (MFA, passwordless authentication, SSO, wallet and checkout security)
• Participate in product roadmap and architecture discussions to define security requirements early in the design phase
• Collaborate closely with Product, Engineering, Fraud, Compliance, and Architecture teams to promote security-by-design principles
• Provide security guidance through threat modeling, secure design reviews, and remediation recommendations
• Contribute to the implementation of security controls related to authentication, session security, fraud prevention, encryption, and secrets management
• Secure integrations with Payment Service Providers (PSP) and support compliance initiatives such as PCI-DSS
• Promote DevSecOps practices and support the integration of security controls into CI/CD pipelines
• Contribute to the continuous improvement of Betclic's security standards, tooling, and cloud security posture

TECHNICAL ENVIRONMENT

• Authentication & Identity: MFA, OAuth2, OIDC, SSO, IAM
• Payment Security: PSP integrations, PCI-DSS, tokenization, fraud prevention
• Application Security: Web & API security, OWASP Top 10
• Security Practices: Threat modeling, secure code review, DevSecOps, security-by-design
• Cloud & Architecture: AWS, Azure, microservices, APIs
• Security Tooling: SAST, DAST, SCA, IaC scanning

WHO ARE WE LOOKING FOR?

We are looking for passionate and curious professionals who bring kindness and a touch of enthusiasm! 

This job is for you if: 

• You have at least 5 years of experience in cybersecurity, application security, authentication, or payment security
• You have strong knowledge of authentication and identity technologies (MFA, OAuth2, OIDC, SSO, IAM)
• You have experience securing payment ecosystems and understanding fraud prevention and PCI-DSS requirements
• You are comfortable with web and API security best practices in modern cloud environments (AWS, Azure, microservices)
• You can perform pragmatic risk analysis while balancing security, user experience, and business needs
• You enjoy working closely with Product, Engineering, Fraud, and Compliance teams in a transversal environment
• You are proactive, pragmatic, and solution-oriented
• You possess strong communication skills in both technical and business contexts
• You are fluent in English

WHAT ARE THE RECRUITMENT STEPS?

If your application is shortlisted, Sebastien or Adele will contact you within a week for an initial HR screening (30 minutes). Then, you will complete the AssessFirst test (personality, motivation and cognitive reasoning). 

Next, you will meet Philippe – Senior Security Referent Manager.

About two weeks later, you will take a technical test with one of our Security experts.

Finally, Sebastien will conduct a final HR interview to review your AssessFirst results together. 

The recruitment process usually takes between 4 to 6 weeks to ensure an optimal experience for you.

WHAT CAN YOU EXPECT?

✅ 25 days of paid leave and 10 RTT days 

A Ticket Restaurant® card credited with €11 per day (€6 per day funded by Betclic) 

100% health insurance coverage for you and your children 

50% reimbursement of public transport costs or an annual sustainable mobility allowance (€230 for commuting with sustainable transport) 

Hybrid work model 

Access to a vast training catalog, with opportunities for professional development every year 

Extraordinary office spaces with a rooftop where you can enjoy sunny breaks with a view of the Cité du Vin 

Internal events to liven up your daily life 

On-site sports classes and organized tournaments (Pilates, circuit training, boxing, yoga, futsal, padel, tennis…)

Permanent contract, available immediately in Bordeaux (remote from another city possible depending on profile - on-site presence required twice a month). Betclic Group – 117 Quai de Bacalan, 33300 BORDEAUX