Security Engineer — AI/LLM Security & Secure SDLC Tools

FanDuel; Atlanta (GA); On-site; USD 134,000 - 168,000; Full time

Benefits offered by this job

Health plans and benefits

PTO & sick leave

Annual bonus

Long-term incentives

401k match

Commuter benefits

Pet insurance

Job summary

FanDuel Group seeks a Security Engineer to advance the Software Security program, delivering security projects across the SDLC and reducing risk in FanDuel’s products. You will write code, review systems for gaps, and craft tooling to automate secure development at scale, with growing focus on AI/LLM security.

You will collaborate with engineers, design and implement security controls, and apply industry frameworks to protect data, infrastructure, and software releases while staying adaptable to

Qualifications

• Hands-on security engineering experience in SDLC.
• Solid coding skills in Python or Go and secure coding practices.
• Experience with AI/LLM security risks and related controls.
• Familiarity with AWS, GCP, or Azure cloud environments.
• Knowledge of OWASP, MITRE ATT&CK, and NIST frameworks.

Responsibilities

• Deliver security projects that support quarterly goals and reduce risk.
• Partner with engineering to identify risks from design to production.
• Build tooling and automation to enable secure development at scale.
• Design AI Agents that enforce security controls across SDLC.
• Assess AI/LLM security threats, including prompt injection and data exposure.

Skills

Security engineering

Python

Go

AI/LLM security

Cloud platforms

OWASP

MITRE ATT&CK

NIST

Code review

Tools

CI/CD tooling

Job description

FanDuel Group seeks a Security Engineer to advance the Software Security program, delivering security projects across the SDLC and reducing risk in FanDuel’s products. You will write code, review systems for gaps, and craft tooling to automate secure development at scale, with growing focus on AI/LLM security.

You will collaborate with engineers, design and implement security controls, and apply industry frameworks to protect data, infrastructure, and software releases while staying adaptable to