William Hill
William Hill has been in the betting game since 1934 - long before any of it moved online. Now the company operates sports betting, casino games, poker, and bingo across retail shops, web platforms, and mobile apps, serving millions of customers worldwide. The attack surface is broad: financial transactions at scale, real-time data streams, identity verification across jurisdictions, and a regulatory environment that doesn't forgive lapses. The threat model isn't hypothetical - gambling is a high-value target for fraud, account takeover, and DDoS, and the compliance footprint spans the UK, US, and European markets. Security teams here are working against adversaries who are financially motivated and operationally sophisticated. That means defending payment systems, securing player data, maintaining platform integrity under heavy traffic, and keeping pace with evolving regulatory requirements around responsible gambling and customer safety. The technical work spans securing online and mobile infrastructure, protecting retail systems, and ensuring that the seams between channels don't become attack vectors. William Hill's geographic presence across multiple regulated markets means security operations have to account for jurisdiction-specific data protection laws and licensing requirements. The company emphasizes responsible gambling and customer safety as core values, which extends to how it handles personal data and transactional integrity. Teams are embedded in a business that has been around for nine decades but runs on modern infrastructure - legacy knowledge and cloud-native tooling coexist, and the security posture has to bridge both.
William Hill has been in the betting game since 1934 - long before any of it moved online. Now the company operates sports betting, casino games, poker, and bingo across retail shops, web platforms, and mobile apps, serving millions of customers worldwide. The attack surface is broad: financial transactions at scale, real-time data streams, identity verification across jurisdictions, and a regulatory environment that doesn't forgive lapses. The threat model isn't hypothetical - gambling is a high-value target for fraud, account takeover, and DDoS, and the compliance footprint spans the UK, US, and European markets.
Security teams here are working against adversaries who are financially motivated and operationally sophisticated. That means defending payment systems, securing player data, maintaining platform integrity under heavy traffic, and keeping pace with evolving regulatory requirements around responsible gambling and customer safety. The technical work spans securing online and mobile infrastructure, protecting retail systems, and ensuring that the seams between channels don't become attack vectors.
William Hill's geographic presence across multiple regulated markets means security operations have to account for jurisdiction-specific data protection laws and licensing requirements. The company emphasizes responsible gambling and customer safety as core values, which extends to how it handles personal data and transactional integrity. Teams are embedded in a business that has been around for nine decades but runs on modern infrastructure - legacy knowledge and cloud-native tooling coexist, and the security posture has to bridge both.