Senior Offensive Security Engineer

Sporty Group
Partnered with some of the World’s greatest Champions including Real Madrid FC, Michael Essien and Eder Militao, we’re on the lookout for some Champions of our own to be a part of the 'Top Ranked Fastest Growing and Most Successful Online Gaming Brand in the World'. Home to SportyBet, SportyTV, Sporty.com, Football.com and the newly launched SportyFM, we continue to lead with innovation and exclusive sports content.
Sporty is expanding and we're building the world's go to platform for everyday entertainment.
In this role you will be leading a high‑impact offensive security on product and platform surfaces (web, mobile backends, APIs) and driving remediation with DevOps and product squads. What you'll be doing

• Plan and execute offensive engagements across web/mobile/API, auth flows, and business logic
• Build repeatable test harnesses and document exploit chains; file issues with risk/rationale and fix guidance
• Partner with engineering on design reviews, fixes, and validation; mentor peers
• Contribute to threat modeling and secure design patterns

What you'll bring

• 5+ years in AppSec/offensive security focused on web/API
• Fluency in auth (OAuth/OIDC), access control (IDOR/BOLA), SSRF, injection classes
• Strong scripting (Python/Go/JS) and proxy tooling (Burp/ZAP)
• Clear communication to translate technical risk into business impact