Senior Cloud Security Engineer, DevSecOps & Threats

Fanatics Inc.; New York (NY); On-site; USD 138,000 - 173,000; Full time

Job summary

Fanatics Betting & Gaming is seeking a Senior Platform Security Engineer in New York to design, implement, and maintain security measures for our cloud-based platform. You will work within the Information Security team to protect Fanatics assets and customer data across Fanatics Betting and Gaming environments.

You will lead DevSecOps initiatives, implement IaC security controls, and stay ahead of threats with detections and observability.

Qualifications

• 7+ years of experience in a DevSecOps/Platform/Platform Security position, or similar role.
• Demonstrated experience leveraging Infrastructure as code tools such as Terraform or Pulumi.
• Experience with identity management protocols (e.g., OAuth, SAML, OpenID Connect).
• Proficient in incident response, threat hunting and cloud security management, with a strong focus on AWS (Azure experience a plus!).
• Ability to communicate effectively with technical and non-technical stakeholders.
• Ability to prioritize and balance multiple projects simultaneously.
• Ability to collaborate and work in a team environment.
• Proven experience drafting documentation such as standards, policies and architecture diagrams.
• Experience with scripting languages such as Python or Bash
• Relevant certifications such as AWS-CSS, OSCP, SSCP, or GSEC are a plus.

Responsibilities

• Implement and maintain cloud security strategy aligned with leading industry standards.
• Responsible for the execution of DevSecOps strategy with a strong focus on both building and evaluating security tools
• Manage security and infrastructure configurations by leveraging Infrastructure-As-Code tools such as Terraform.
• Responsible for cloud security management which includes identifying, tracking and advising on all cloud security threats, vulnerabilities and misconfigurations.
• Responsible for writing custom detections to improve cloud threat detection and observability.
• Collaborate with internal teams to ensure that secure implementation guidelines are followed across the fanatics betting and gaming environment.
• Responsible for investigation, remediation and root cause analysis of all cloud security escalations from MSSP, CSPM, SIEM and other notification mechanisms.
• Participate in an on-call rotation to provide 24/7 support for critical incident escalations.
• Stay up-to-date on the latest threats, vulnerabilities, and security trends to ensure that our organization is prepared to address emerging threats.

Skills

OAuth

SAML

OpenID Connect

Threat hunting

Incident response

Tools

Terraform

Pulumi

Python

Bash

AWS

Job description

Fanatics Betting & Gaming is seeking a Senior Platform Security Engineer in New York to design, implement, and maintain security measures for our cloud-based platform. You will work within the Information Security team to protect Fanatics assets and customer data across Fanatics Betting and Gaming environments.

You will lead DevSecOps initiatives, implement IaC security controls, and stay ahead of threats with detections and observability.