[Hiring] Senior Security Engineer @Fanatics Betting & Gaming

Role Description

As a Sr. Security Engineer at Fanatics Betting & Gaming (FBG), your knowledge and experience in designing, implementing and maintaining security measures will help the organization stay ahead of security risks and protect company assets. This role sits on the Security Operations Team within the Information Security department and reports to the Manager, Security Engineering.

• Partner with cross functional teams on endpoint security initiatives, ensuring configurations, policies, and enforcement mechanisms are sound and aligned with organizational risk tolerance.
• Monitor and help remediate vulnerabilities across the endpoint and mobile fleet, partnering with IT on patch management and compliance tracking.
• Continuous evaluation of several security tools including but not limited to Data Loss Prevention, Vulnerability Management, Identity and Access Management, Web Application Firewall, Email Protection and Endpoint Protection.
• Develop and maintain a library of scripts to be leveraged to automate threat hunting, detection, and digital forensics efforts.
• Design, implement and refine security detection mechanisms to improve operational efficiency and observability.
• Leverage AI tools and workflows to accelerate threat hunting, detection, and other automation efforts.
• Mentor junior team members and build out runbooks and training resources that raise the bar for the whole team.
• Stay up-to-date on the latest threats, vulnerabilities, and security trends to ensure that our organization is prepared to address emerging threats.
• Collaborate with internal teams to ensure that secure implementation guidelines are followed.
• Participate in an on-call rotation to provide 24/7 support for critical incident escalations.

Qualifications

• 7+ years of experience as a security engineer or in a similar role
• Strong hands on experience securing and managing mobile devices at scale
• Experience with vulnerability management practices and tools, particularly for endpoint and mobile device compliance.
• Experience participating in incident response efforts, with the ability to lead investigations involving endpoint or mobile compromise.
• Experience with identity management protocols (e.g., OAuth, SAML, OpenID Connect).
• Experience evaluating, selecting, or implementing enterprise security tools (e.g., DLP, IAM, WAF, email security).
• Experience building or tuning detection logic to identify malicious activity (detection engineering).
• Experience automating security workflows via SOAR or custom scripting.
• Demonstrated ability to adapt to evolving priorities, ambiguous requirements and a rapidly changing security landscape.
• Team player and strong communicator able to translate technical concepts for any audience.
• Eager to learn and adapt with a drive to learn new tools, techniques, and approaches as the security landscape evolves.
• Experience drafting high quality documentation such as standards, policies, and architecture diagrams.
• Demonstrated experience leveraging Infrastructure as code tools such as Terraform or Ansible is preferred.
• Experience with Cloudflare Datadog, Wiz and Tines is preferred.
• Foundational knowledge in agile methodologies required.
• Experience with scripting languages such as Python or Bash is required.
• Relevant certifications such as GCIH, OSCP, or GSEC are a plus.

Company Description