Staff Product Security Engineer

FanDuel · New York City

// classified as

Other (Adjacent or hard to classify.)

> stack

pythonsql

> description

THE POSITION Our roster has an opening with your name on it As a Staff Security Engineer on our Product Security team, you'll define and deliver multi-year security initiatives and set the direction for how FanDuel engineers build securely by default at scale. Working across the engineering organization, you'll identify risk before it surfaces and shape the technical and organizational capabilities the team needs to stay ahead. You'll define both the what and the how, mentor the next generation of security talent, and step into whatever gap is keeping the program from moving forward.  In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs. THE GAME PLAN Everyone on our team has a part to play <ul> <li data-leveltext="•" data-font="" data-listid="4" data-list-defn-props="{"335552541":0,"335559685":720,"335559991":360,"469769242":[65533,0],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Define the multi-year vision and strategy for how Security engages with engineering, and set the standards that make secure design the path of least resistance across FanDuel. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="4" data-list-defn-props="{"335552541":0,"335559685":720,"335559991":360,"469769242":[65533,0],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">Partner with leadership across the business to shape direction, work through trade-offs, and make sure security is a first-class input into our engineering strategy. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="4" data-list-defn-props="{"335552541":0,"335559685":720,"335559991":360,"469769242":[65533,0],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">Set the direction for AI/LLM security architecture across FanDuel by defining the controls, patterns, assessment frameworks, and governance models that let us ship AI-powered products safely and at speed. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="4" data-list-defn-props="{"335552541":0,"335559685":720,"335559991":360,"469769242":[65533,0],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1">Build automation and tooling that shifts our efforts into scalable, repeatable, build-secure-by-default systems. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="4" data-list-defn-props="{"335552541":0,"335559685":720,"335559991":360,"469769242":[65533,0],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Mentor other engineers, shape technical culture, and help grow the next generation of security leaders across the organization. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="4" data-list-defn-props="{"335552541":0,"335559685":720,"335559991":360,"469769242":[65533,0],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Adapt your role to fill technical or organizational gaps as the program evolves. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="4" data-list-defn-props="{"335552541":0,"335559685":720,"335559991":360,"469769242":[65533,0],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1">Other duties as required. </li> </ul>   THE STATS What we're looking for in our next teammate <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Deep, hands-on security engineering experience embedded in the software development lifecycle — from design and code review through CI/CD, deployment, and production. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">A demonstrated track record of defining and delivering multi-year security strategy in ambiguous, fast-moving environments. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">Hands-on AI/LLM security experience — you understand how these systems work, where they fail, and you've formed strong opinions on how to secure them. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1">A track record of building automation and tooling that scales security capabilities and reduces toil. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Familiarity with modern cloud infrastructure (AWS, GCP, or Azure), CI/CD pipelines, and software development environments at scale. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Strong experience building and scaling reusable security patterns and assets across an engineering organization. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1">Solid coding skills in at least one modern programming language (Python, Go, or similar). </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1">Command of industry frameworks (NIST, ISO 27001, OWASP, MITRE ATT&CK, SOC 2) and a pragmatic view on how and when to apply them. </li> </ul> <ul> <li data-leveltext="•" data-font="" data-listid="1" data-list-defn-props="{"335551671":1,"335552541":0,"335559683":0,"335559684":-1,"335559685":720,"335559991":360,"469769242":[65533,0,46],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="9" data-aria-level="1">Experience mentoring senior engineers and shaping technical culture across an organization. </li> </ul> ABOUT FANDUEL FanDuel Group is the premier mobile gaming company in the United States and Canada. FanDuel Group consists of a portfolio of leading brands across mobile wagering including: America’s #1 Sportsbook, FanDuel Sportsbook; its leading iGaming platform, FanDuel Casino; the industry’s unquestioned leader in horse racing and advance-deposit wagering, FanDuel Racing; and its daily fantasy sports product.   In addition, FanDuel Group operates FanDuel TV, its broadly distributed linear cable television network and FanDuel TV+, its leading direct-to-consumer OTT platform. FanDuel Group has a presence across all 50 states, Canada, and Puerto Rico. The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia. FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT). PLAYER BENEFITS We treat our team right We offer amazing benefits above and beyond the basics. We have an array of health plans to choose from (some as low as $0 per paycheck) that include programs for fertility and family planning, mental health support, and fitness benefits. We offer generous paid time off (PTO & sick leave), annual bonus and long-term incentive opportunities (based on performance), 401k with up to a 5% match, commuter benefits , pet insurance, and more - check out all our benefits here: <a href="https://fanduelbenefits.com/">FanDuel Total Rewards</a>. *Benefits differ across location, role, and level. FanDuel is an equal opportunities employer and we believe, as one of our principles states, “We are One Team!”. As such, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included. The applicable salary range for this position is $184,000 - $241,500 USD, which is dependent on a variety of factors including relevant experience, location, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes paid personal time off and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws. FanDuel is committed to providing reasonable accommodations for qualified individuals with disabilities. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please email <a class="ms-outlook-linkify" href="mailto:Benefits@fanduel.com">Benefits@fanduel.com</a>. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.   #LI-Hybrid