About EFG (ESL FACEIT Group)

At EFG (ESL FACEIT Group) we create worlds beyond gameplay where players and fans become community. We pride ourselves in having a corporate social responsibility which is that “IT’S NOT GG, UNTIL IT’S GG FOR ALL”. We are passionate about the culture we foster that ultimately helps to create and shape the world of esports, gaming tournaments, leagues, events and holistic ecosystems staged for our millions of players, fans and heroes.

Everything we do, from global esports tournaments and community-driven leagues to next-generation platforms and live events, is rooted in our passion, craftsmanship, and culture. With millions of players and fans around the world, we aim to shape the future of esports and gaming by building ecosystems that are inclusive, innovative, and enduring.

About FACEIT

As one of the core pillars of EFG, FACEIT is the beating heart of competitive online gaming. With over 26 million registered users playing 30 million matches each month, we are the industry leader in competitive play. Our platform is where gamers of all levels come together to test their skills, climb the ranks, and forge communities. At FACEIT, we’re relentless in our pursuit of excellence. We push the limits of technology, deliver cutting-edge features, and provide an unparalleled competitive gaming experience. Our vision is simple: to empower every player to reach their full potential, while keeping competition fair, engaging, and thrilling.

The Role

The Senior Security Engineer leads the evolution of EFG’s information security posture by architecting and overseeing the implementation of enterprise security tools, platforms, and frameworks across the organization. This role is a technical authority responsible for driving high-impact security outcomes through automation and strategic resource allocation, ensuring the secure, resilient, and scalable operation of the Digital Platform (FACEIT) and the wider EFG ecosystem.

What we are looking for

• Security Architecture & Threat Engineering: Architect and oversee the deployment of advanced security monitoring frameworks. Design automated detection logic to identify complex attack patterns across diverse log sources. Serve as the final escalation point for the Security Support Desk, resolving high-impact incidents and engineering systemic fixes for recurring issues.
• Secure Software Development Life Cycle (SSDLC) Leadership: Lead the integration of security-as-code within the CI/CD pipeline. Architect the automated deployment of SAST, DAST, and SCA tooling, and partner with Engineering leads to define security gating criteria. Provide expert-level remediation guidance for complex architectural flaws and critical code vulnerabilities.
• Enterprise Vulnerability & Risk Management: Own the end-to-end vulnerability management strategy for infrastructure and applications. Prioritise remediation efforts based on business risk and exploitability, and lead cross-departmental task forces to address systemic security gaps. Oversee the technical relationship with external penetration testers and bug bounty researchers.
• Security Engineering & Orchestration: Design, implement, and optimize core security infrastructure (e.g. EDR, Zero Trust, IAM, and DLP). Focus on automation and orchestration (SOAR) to reduce manual overhead and ensure security controls are consistently enforced across a global, multi-cloud environment.
• Incident Response Leadership: Lead the technical response to high-priority security incidents. Drive the containment, eradication, and recovery phases, while coordinating communication between technical teams and senior stakeholders. Conduct deep-dive root cause analyses and develop long-term engineering roadmaps to prevent incident recurrence.
• Compliance & Security Assurance: Lead internal security audits and maturity assessments. Ensure systems align with international standards (e.g., ISO 27001) and regulatory requirements. Define the technical standards that validate the effectiveness of the organisation’s control environment.
• Strategic Technical Advisory: Act as a primary security consultant for major business initiatives. Evaluate the security posture of new technologies and third-party vendors, ensuring that all projects are built on a foundation of "Security by Design."
• Standardisation & Mentorship: Define the standards for SOPs, runbooks, and technical documentation. Mentor junior and mid-level security engineers to elevate the team’s collective technical proficiency and ensure the consistent execution of high-quality security operations.