Sporty GroupPartnered with some of the World’s greatest Champions including Real Madrid FC, Michael Essien and Eder Militao, we’re on the lookout for some Champions of our own to be a part of the 'Top Ranked Fastest Growing and Most Successful Online Gaming Brand in the World'. Home to SportyBet, SportyTV, Sporty.com, Football.com and the newly launched SportyFM, we continue to lead with innovation and exclusive sports content.Sporty is expanding and we're building the world's go to platform for everyday entertainment.In this role you will be leading a high‑impact offensive security on product and platform surfaces (web, mobile backends, APIs) and driving remediation with DevOps and product squads.
What you'll be doingPlan and execute offensive engagements across web/mobile/API, auth flows, and business logicBuild repeatable test harnesses and document exploit chains; file issues with risk/rationale and fix guidancePartner with engineering on design reviews, fixes, and validation; mentor peersContribute to threat modeling and secure design patterns
What you'll bring5+ years in AppSec/offensive security focused on web/APIFluency in auth (OAuth/OIDC), access control (IDOR/BOLA), SSRF, injection classesStrong scripting (Python/Go/JS) and proxy tooling (Burp/ZAP)Clear communication to translate technical risk into business impact
What’s In It For You📍 Sporty is a remote first company in pursuit of sustainability💰 A competitive salary + individual performance based bonuses every quarter🌴 28 days paid annual leave⏰ Our core working hours are 10am-3pm in your local time zone with flexibility outside of this📝 Referral bonuses & flash bonuses💻 Top of the line equipment🌍 Annual company retreats to provide great internal networking opportunitiesInterview ProcessRemote video screening with our Talent Acquisition Team Online assessment via HackerrankRemote video interview with Team Members (60 Mins)Final discussion with the hiring manager (60 mins)Personalised SupportWe’re committed to making our recruitment process accessible to everyone. If you need any adjustments or accommodations during the application or interview process, please let us know.Your MoveIf you're excited about this role, even if you don't meet every requirement, we'd still love to hear from you. We understand candidates may hesitate to apply if they don't meet all requirements, however your unique perspective is what helps us innovate and grow together.If you're interested, we encourage you to apply! Every application is reviewed by a member of our team (AI is not used in our recruitment process), and we aim to respond within 48 hours.