Senior Staff Security Engineer

Fanatics; New York (NY); On-site; USD 167,000 - 275,000; Full time

Job summary

Fanatics is seeking a Senior Staff Security Engineer to lead across application, AI, cloud, identity and edge security. You’ll drive security reviews, ship tooling with engineering partners, and scale security programs for a large, multi-account environment.

Responsibilities include setting secure architecture across on-prem and cloud, leading threat model reviews for complex services and AI systems, and contributing production code to security features and tooling while mentoring engineers and

Qualifications

• 12+ years in security engineering or related field.
• 6+ years hands-on software engineering.
• Proficient in Python, Java, or Go.
• Deep security expertise across AI, cloud, and app security.
• Experience securing AI systems and model pipelines.
• Experience with AWS security services at scale.

Responsibilities

• Set secure architecture across product and enterprise environments.
• Lead threat model reviews for complex services and AI systems.
• Define and evolve AI security approaches and model pipelines.
• Contribute production code to security features and tooling.
• Serve as escalation point across security domains for multiple teams.
• Drive security coding programs with infrastructure as code and policy-as-code.
• Mentor senior engineers and represent security in architecture discussions.
• Participate in on-call rotation for incident escalations.

Skills

Security engineering

Secure coding

AppSec

Cloud security

Threat modeling

AI security

CI/CD security

Identity management

Policy as code

Tools

Terraform

Ansible

AWS WAF

Cloudflare

Job description

About Us

Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

About Us

Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

About The Team

As a Senior Staff Security Engineer on the Fanatics Ecosystems Security team, you'll operate across the full breadth of our security domains, spanning application, AI, cloud, identity, and edge security. You'll lead security reviews, deliver impactful tooling in close partnership with engineering teams, and drive security programs with efficiency and scale.

Responsibilities

• Set the secure architecture strategy across product and enterprise environments, including on-premises, cloud, and containerless environments, establishing patterns and guardrails that other engineers and security teams build on, with a primary focus on application security and AI/ML system security
• Lead threat model reviews for the most complex services and AI systems, including LLM-integrated products, agentic workflows, and model supply chains. (Be an Enabler)
• Define and evolve the org's approach to AI security, securing model pipelines, data and trust boundaries, third-party model integrations, and AI attack surfaces
• Contribute production code to product features and internal security tooling as a hands-on engineering partner
• Act as the technical escalation point across security domains, including AppSec, cloud, identity, CI/CD, and AI, providing efficient security input across multiple product teams and architecture reviews simultaneously
• Drive and scale security coding programs supporting immutable, version-controlled environments through infrastructure as code, detection as code, and other engineering security initiatives
• Mentor senior and staff level engineers, raising the security engineering bar across the organization
• Represent security in cross-functional and executive level architecture discussions, translating technical risk into business impact
• Participate in an on-call rotation to provide 24/7 support for incident escalations, serving as an escalation lead for the most complex incidents

Experience And Skills

• 12+ years of experience in security engineering or a related field, including 6+ years of hands-on software engineering experience
• Required: Strong proficiency developing and reviewing code in one or more programming languages, including Python, Java, or Go
• Deep expertise in application security, including secure SDLC integration, SAST/DAST/IAST tooling, manual code review, and API security.
• Demonstrated experience securing AI systems, including LLM application security, prompt injection defenses, data governance, secure agentic tool use, and emerging AI-specific threats
• Demonstrated expertise implementing AWS security services and best practices (CloudTrail, GuardDuty, CloudWatch, Security Hub) at scale across multi-account environments
• Hands-on experience managing WAF platforms (Cloudflare, Akamai, Fastly, AWS WAF or equivalent), including custom rule development, not just enabling managed rulesets
• Demonstrated experience leveraging infrastructure as code with tools such as Terraform or Ansible, including designing secure module patterns and policy-as-code guardrails
• Experience with identity management protocols (OAuth, SAML, OpenID Connect) and designing identity architecture across multiple business units or products
• Deep understanding of secure CI/CD pipeline design, able to define what a good release pipeline looks like, why each stage exists, and how to harden against supply chain and pipeline compromise
• Track record of influencing security strategy and roadmap at an organizational level, not just executing within a single team
• Relevant certifications such as OSCP, OSWE, OSCE, or CISSP

For information about our benefits, please visit https://benefitsatfanatics.com/. Ranges will change based on country and state of residence, which are reflected in Geographical Zones defined by Fanatics Betting & Gaming. The range incorporates all of our Geographical Compensation Zones and is subject to change as the Zone associated with the actual offer is confirmed. In addition to the base and bonus, full-time employment, and more.

Salary Range

$167,000 - $275,000 USD