Senior Platform Security Engineer (Remote) New York, NY, United States

Fanatics Inc.; New York (NY); À distance; USD 138 000 - 173 000; Plein temps

Résumé du poste

Fanatics Betting and Gaming is seeking a Senior Platform Security Engineer to design, implement, and maintain cloud security across our platforms. The role emphasizes DevSecOps, IaC, and threat detection in a remote setting for a US-based team.

You will collaborate with stakeholders, draft security standards, and respond to incidents while staying current with evolving threats. A strong AWS focus is required, with Azure knowledge a plus.

Qualifications

• 7+ years in DevSecOps or platform security roles.
• Experience with Terraform or Pulumi IaC.
• Experience with OAuth, SAML, OpenID Connect.
• Strong AWS focus; Azure a plus.
• Excellent communication with technical and non-technical stakeholders.
• Ability to manage multiple projects and collaborate.
• Experience drafting standards and architecture diagrams.
• Scripting in Python or Bash.
• Certifications: AWS-CSS, OSCP, SSCP, or GSEC are a plus.

Responsabilités

• Implement and maintain cloud security strategy aligned with industry standards.
• Execute DevSecOps strategy with focus on building and evaluating security tools.
• Manage IaC configurations using Terraform.
• Oversee cloud security threats, vulnerabilities and misconfigurations.
• Write custom detections to improve cloud threat detection and observability.
• Collaborate with internal teams to ensure secure guidance is followed.
• Investigate, remediate and perform root cause analysis of cloud security escalations.
• Participate in on-call rotation for 24/7 incident support.
• Stay up-to-date on threats, vulnerabilities and security trends.

Connaissances

DevSecOps

Cloud security

Identity management

Python

Bash

Threat hunting

Incident response

Documentation

Formation

AWS-CSS

OSCP

SSCP

GSEC

Outils

Terraform

Pulumi

Description du poste

Senior Platform Security Engineer (Remote)

New York, NY, United States

About Us

Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

About the Team

Launched in 2021, Fanatics Betting and Gaming is the online and retail sports betting subsidiary of Fanatics, a global digital sports platform. The Fanatics Sportsbook is available to 95% of the addressable online sports bettor market in the U.S. Fanatics Casino is currently available online in Michigan, New Jersey, Pennsylvania and West Virginia. Fanatics Betting and Gaming operates twenty-two retail sports betting locations, including the only sportsbook inside an NFL stadium at Northwest Stadium. Fanatics Betting and Gaming is headquartered in New York with offices in Denver, Leeds and Dublin.

As a Senior Platform Security Engineer at Fanatics Betting & Gaming (FBG), your knowledge and experience in designing, implementing and maintaining security measures will help the organization stay ahead of security risks and protect company assets. This role sits within the Information Security department and reports to a Security Engineering Manager.

Responsibilities:

• Implement and maintain cloud security strategy aligned with leading industry standards.
• Responsible for the execution of DevSecOps strategy with a strong focus on both building and evaluating security tools
• Manage security and infrastructure configurations by leveraging Infrastructure-As-Code tools such as Terraform.
• Responsible for cloud security management which includes identifying, tracking and advising on all cloud security threats, vulnerabilities and misconfigurations.
• Responsible for writing custom detections to improve cloud threat detection and observability.
• Collaborate with internal teams to ensure that secure implementation guidelines are followed across the fanatics betting and gaming environment.
• Responsible for investigation, remediation and root cause analysis of all cloud security escalations from MSSP, CSPM, SIEM and other notification mechanisms.
• Participate in an on-call rotation to provide 24/7 support for critical incident escalations.
• Stay up-to-date on the latest threats, vulnerabilities, and security trends to ensure that our organization is prepared to address emerging threats.

Qualifications:

• 7+ years of experience in a DevSecOps/Platform/Platform Security position, or similar role
• Demonstrated experience leveraging Infrastructure as code tools such as Terraform or Pulumi.
• Experience with identity management protocols (e.g., OAuth, SAML, OpenID Connect).
• Proficient in incident response, threat hunting and cloud security management, with a strong focus on AWS (Azure experience a plus!).
• Ability to communicate effectively with technical and non-technical stakeholders.
• Ability to prioritize and balance multiple projects simultaneously.
• Ability to collaborate and work in a team environment.
• Proven experience drafting documentation such as standards, policies and architecture diagrams.
• Experience with scripting languages such as Python or Bash
• Relevant certifications such as AWS-CSS, OSCP, SSCP, or GSEC are a plus.

Depending on the role, your interview and onboarding experience may include in-person components, such as onsite interviews or Launching into Better: LIVE—a multi-day cultural immersion in New York City for full-time, non-seasonal hires. These sessions are designed to build connection and bring our culture to life, though specific travel and participation requirements will be confirmed based on your role and location. Your recruiter will provide clear guidance at each stage of the process.

Ranges will change based on country and state of residence, which are reflected in Geographical Zones defined by Fanatics Betting and Gaming. The range incorporates all of our Geographical Compensation Zones and is subject to change as the Zone associated with the actual offer is confirmed. In addition to the base and bonus, full-time employment, and more. For information about our benefits, please visit https://benefitsatfanatics.com/

Salary Range

$138,240 - $172,800 USD

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Fanatics Betting & Gaming’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.