THE POSITIONOur roster has an opening with your name on it
As a Staff Security Engineer on our Product Security team, you'll define and deliver multi-year security initiatives and set the direction for how FanDuel engineers build securely by default at scale. Working across the engineering organization, you'll identify risk before it surfaces and shape the technical and organizational capabilities the team needs to stay ahead. You'll define both the what and the how, mentor the next generation of security talent, and step into whatever gap is keeping the program from moving forward.
In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.
THE GAME PLAN- Define the multi-year vision and strategy for how Security engages with engineering, and set the standards that make secure design the path of least resistance across FanDuel.
- Partner with leadership across the business to shape direction, work through trade-offs, and make sure security is a first-class input into our engineering strategy.
- Set the direction for AI/LLM security architecture across FanDuel by defining the controls, patterns, assessment frameworks, and governance models that let us ship AI-powered products safely and at speed.
- Build automation and tooling that shifts our efforts into scalable, repeatable, build-secure-by-default systems.
- Mentor other engineers, shape technical culture, and help grow the next generation of security leaders across the organization.
- Adapt your role to fill technical or organizational gaps as the program evolves.
- Other duties as required.
THE STATSWhat we're looking for in our next teammate
- Deep, hands-on security engineering experience embedded in the software development lifecycle - from design and code review through CI/CD, deployment, and production.
- A demonstrated track record of defining and delivering multi-year security strategy in ambiguous, fast-moving environments.
- Hands-on AI/LLM security experience - you understand how these systems work, where they fail, and you've formed strong opinions on how to secure them.
- A track record of building automation and tooling that scales security capabilities and reduces toil.
- Familiarity with modern cloud infrastructure (AWS, GCP, or Azure), CI/CD pipelines, and software development environments at scale.
- Strong experience building and scaling reusable security patterns and assets across an engineering organization.
- Solid coding skills in at least one modern programming language (Python, Go, or similar).
- Command of industry frameworks (NIST, ISO 27001, OWASP, MITRE ATT&CK, SOC 2) and a pragmatic view on how and when to apply them.
- Experience mentoring senior engineers and shaping technical culture across an organization.
#LI-Hybrid
