Sr. Security Engineer- FBG

Fanatics

New York (NY)

On-site

USD 161,000 - 212,000

Full time

27 hours ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Fanatics Betting and Gaming is hiring a Senior Security Engineer to design, implement, and maintain security measures across cloud environments. You will lead incident response, threat hunting, and automation efforts within the Information Security department in New York.

The role requires expertise in AWS, IAM, and cryptographic controls, plus experience with SIEM, SOAR and IaC tools. This is a full-time, remote-capable position with a strong compensation package.

Qualifications

8+ years in security engineering or similar role.
Proficient in incident response, threat hunting and cloud security with focus on AWS.
Proficient in purple team operations with offensive and defensive strategy.
Experience with identity management protocols (OAuth, SAML, OpenID Connect).
Experience automating incident response playbooks leveraging SOAR solutions.
Experience with Cloudflare, Datadog, Wiz and Tines is preferred.
Able to communicate effectively with technical and non-technical stakeholders.
Proven experience drafting standards, policies and architecture diagrams.
Ability to collaborate in a team environment.
IaC tools such as Terraform or Ansible is a plus.
Familiarity with agile methodologies and scripting (Python or Bash).
Certifications like OSCP, SSCP or GSEC are a plus.

Responsibilities

Continuously evaluate security tooling: DLP, vulnerability management, IAM, WAF, email and endpoint protection.
Evaluate and implement security, orchestration, automation and response software.
Develop and maintain scripts to automate threat hunting, detection, and forensics.
Design and refine detection mechanisms to improve operations and observability.
Maintain a cloud-based SIEM with ingested logs and tuned alerts.
May act as lead incident responder and stay updated on threats.
Conduct security awareness training via phishing campaigns.
Collaborate with teams to ensure secure implementation guidelines.
Participate in on-call rotation for 24/7 incident support.

Skills

Incident response

Threat hunting

Cloud security

AWS

Purple team operations

IAM protocols (OAuth/SAML/OIDC)

SOAR

Communication

Documentation

IaC (Terraform/Ansible)

Python/Bash scripting

Security certifications

Education

OSCP/SSCP/GSEC certifications

Tools

Cloudflare

Datadog

Wiz

Tines

Job description

About Us

Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

About Us

About The Team

Launched in 2021, Fanatics Betting and Gaming is the online and retail sports betting subsidiary of Fanatics, a global digital sports platform. The Fanatics Sportsbook is available to 95% of the addressable online sports bettor market in the U.S. Fanatics Casino is currently available online in Michigan, New Jersey, Pennsylvania and West Virginia. Fanatics Betting and Gaming operates twenty-two retail sports betting locations, including the only Sportsbook inside an NFL stadium at Northwest Stadium. Fanatics Betting and Gaming is headquartered in New York with offices in Denver, Leeds and Dublin. This role is remote. As a Sr. Security Engineer at Fanatics Betting & Gaming (FBG), your knowledge and experience in designing, implementing and maintaining security measures will help the organization stay ahead of security risks and protect company assets. This role sits within the Information Security department and reports to the Manager, Security Engineering.

Responsibilities

Continuous evaluation of several security tools including but not limited to Data Loss Prevention, Vulnerability Management, Identity and Access Management, Web Application Firewall, Email Protection and Endpoint Protection.
Evaluate and implement a Security, Orchestration, Automation and Response software.
Develop and maintain a library of scripts to be leveraged to automate threat hunting, detection, and digital forensics efforts.
Design, implement and refine security detection mechanisms to improve operational efficiency and observability.
Effectively maintain a cloud based SIEM by ensuring relevant logs are ingested and alerts are tuned.
Tasked with leveraging expertise in the area of incident response, this role may also function as the lead incident responder.
Stay up-to-date on the latest threats, vulnerabilities, and security trends to ensure that our organization is prepared to address emerging threats.
Conduct security awareness training by conducting internal phishing campaigns.
Collaborate with internal teams to ensure that secure implementation guidelines are followed.
Participate in an on-call rotation to provide 24/7 support for critical incident escalations.

Qualifications

Minimum of 8 years of experience as a security engineer or in a similar role
Proficient in incident response, threat hunting and cloud security, with a focus on AWS.
Proficient in purple team operations with expertise in offensive and defensive strategy.
Experience with identity management protocols (e.g., OAuth, SAML, OpenID Connect).
Experience automating incident response playbooks leveraging SOAR solutions.
Experience with Cloudflare Datadog, Wiz and Tines is preferred.
Ability to communicate effectively with technical and non-technical stakeholders
Proven experience drafting documentation such as standards, policies and architecture diagrams.
Ability to collaborate and work in a team environment
Demonstrated experience leveraging Infrastructure as code tools such as Terraform or Ansible is a plus.
Foundational knowledge in agile methodologies with ability to successfully collaborate with multiple stakeholders.
Experience with scripting languages such as Python or Bash is required
Relevant certifications such as OSCP, SSCP, or GSEC are a plus

Depending on the role, your interview and onboarding experience may include in-person components, such as onsite interviews or Launching into Better: LIVE—a multi-day cultural immersion in New York City for full-time, non-seasonal hires. These sessions are designed to build connection and bring our culture to life, though specific travel and participation requirements will be confirmed based on your role and location. Your recruiter will provide clear guidance at each stage of the process.

For information about our benefits, please visit https://benefitsatfanatics.com/

Ranges will change based on country and state of residence, which are reflected in Geographical Zones defined by Fanatics Betting and Gaming. The range incorporates all of our Geographical Compensation Zones and is subject to change as the Zone associated with the actual offer is confirmed. In addition to the base and bonus, full-time employment, and more.

Salary Range

$161,000 - $212,000 USD

Get your free, confidential resume review.

or drag and drop your file here.