Flutter Entertainment processes real-money wagers from roughly 13.9 million monthly active players across 11 brands - including FanDuel, PokerStars, Betfair, and Paddy Power - pulling in approximately $16.4 billion in annual revenue. The threat surface is massive: high-volume financial transactions, identity verification at scale, persistent fraud attempts, and regulatory scrutiny across jurisdictions spanning the US, UK, Ireland, Italy, Australia, and beyond.
The company operates a federated model - each brand retains local autonomy - which means security teams deal with heterogeneous tech stacks, varied compliance regimes, and attack surfaces that don't reduce to a single perimeter. Responsible gaming commitments and sustainable business practices are listed cultural values; for security engineering, that translates to protecting player data, ensuring platform integrity, and meeting increasingly aggressive regulatory timelines in newly legalized US sports betting markets.
With over 29,000 employees globally and headquarters in Dublin, Flutter's security function operates across multiple geographies. The work spans application security, fraud detection, identity and access management, cloud infrastructure hardening, and incident response - each domain complicated by the need to defend brands that run semi-independently. It's a regulated-finance-grade problem set dressed in consumer-tech velocity.
