Lead secure architecture strategy across application, cloud, identity, edge, and AI security domains. Conduct threat modeling for complex services and LLM systems, define AI security practices, build security tooling, harden CI/CD and infrastructure-as-code environments, and manage AWS and WAF security controls. Serve as a technical escalation lead for security incidents, influence enterprise security strategy, represent security in executive architecture discussions, mentor senior engineers, and participate in 24/7 on-call support.
About Us
About the TeamFanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.
As a Senior Staff Security Engineer on the Fanatics Ecosystems Security team, you'll operate across the full breadth of our security domains, spanning application, AI, cloud, identity, and edge security. You'll lead security reviews, deliver impactful tooling in close partnership with engineering teams, and drive security programs with efficiency and scale.
Responsibilities- Set the secure architecture strategy across product and enterprise environments, including
on-premises, cloud, and containerless environments, establishing patterns and guardrails that other
engineers and security teams build on, with a primary focus on application security and AI/ML
system security - Lead threat model reviews for the most complex services and AI systems, including LLM-integrated
products, agentic workflows, and model supply chains. (Be an Enabler) - Define and evolve the org's approach to AI security, securing model pipelines, data and trust
boundaries, third-party model integrations, and AI attack surfaces - Contribute production code to product features and internal security tooling as a hands-on
engineering partner - Act as the technical escalation point across security domains, including AppSec, cloud, identity,
CI/CD, and AI, providing efficient security input across multiple product teams and architecture
reviews simultaneously - Drive and scale security coding programs supporting immutable, version-controlled environments
through infrastructure as code, detection as code, and other engineering security initiatives - Mentor senior and staff level engineers, raising the security engineering bar across the organization
- Represent security in cross-functional and executive level architecture discussions, translating
technical risk into business impact - Participate in an on-call rotation to provide 24/7 support for incident escalations, serving as an
escalation lead for the most complex incidents
- 12+ years of experience in security engineering or a related field, including 6+ years of hands-on
software engineering experience - Required: Strong proficiency developing and reviewing code in one or more programming
languages, including Python, Java, or Go - Deep expertise in application security, including secure SDLC integration, SAST/DAST/IAST tooling,
manual code review, and API security. - Demonstrated experience securing AI systems, including LLM application security, prompt injection
defenses, data governance, secure agentic tool use, and emerging AI-specific threats - Demonstrated expertise implementing AWS security services and best practices (CloudTrail,
GuardDuty, CloudWatch, Security Hub) at scale across multi-account environments - Hands-on experience managing WAF platforms (Cloudflare, Akamai, Fastly, AWS WAF or equivalent),
including custom rule development, not just enabling managed rulesets - Demonstrated experience leveraging infrastructure as code with tools such as Terraform or Ansible,
including designing secure module patterns and policy-as-code guardrails - Experience with identity management protocols (OAuth, SAML, OpenID Connect) and designing
identity architecture across multiple business units or products - Deep understanding of secure CI/CD pipeline design, able to define what a good release pipeline
looks like, why each stage exists, and how to harden against supply chain and pipeline compromise - Track record of influencing security strategy and roadmap at an organizational level, not just
executing within a single team - Relevant certifications such as OSCP, OSWE, OSCE, or CISSP
Depending on the role, your interview and onboarding experience may include in-person components, such as onsite interviews or Launching into Better: LIVE—a multi-day cultural immersion in New York City for full-time, non-seasonal hires. These sessions are designed to build connection and bring our culture to life, though specific travel and participation requirements will be confirmed based on your role and location. Your recruiter will provide clear guidance at each stage of the process.
For information about our benefits, please visit https://benefitsatfanatics.com/
Ranges will change based on country and state of residence, which are reflected in Geographical Zones defined by Fanatics Betting and Gaming. The range incorporates all of our Geographical Compensation Zones and is subject to change as the Zone associated with the actual offer is confirmed. In addition to the base and bonus, full-time employment, and more. For information about our benefits, please visit https://benefitsatfanatics.com/
Salary Range
$167,000—$275,000 USD
By submitting your application, you agree to our terms of service and acknowledge you have read our Candidate Privacy Policy.
Fanatics New York, New York, USA Office
New York, NY, United States
Similar Jobs
Healthtech • Social Impact • Software
Build and advance application and product security across the engineering organization. Responsibilities include establishing secure defaults, CI guardrails, security requirements, threat modeling, risk assessments, penetration testing, vulnerability remediation, secure coding education, roadmap ownership, and hands-on code review. The role partners closely with product, engineering, DevOps, and services teams to secure applications, microservices, and AI features while enabling efficient development.
Top Skills:
Ci/CdDastMicroservicesPenetration TestingSastSbomThreat Modeling
Healthtech • Information Technology • Software • Telehealth
Lead architecture and scaling of an automated, AI-driven vulnerability detection and remediation platform across cloud, containers, and applications. Correlate SAST/DAST/SCA findings, implement AI-assisted triage, run red/purple team validation, and build automated remediation pipelines integrated into CI/CD for continuous compliance and risk reduction.
Top Skills:
AWSAzureCi/CdCloud Posture ToolingContainer RegistriesCvssDastDockerEpssGCPGenaiGoKubernetesLlm ApisOwasp Top 10PythonRustSastScaVulnerability Scanners
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
Lead product security across the SDLC: threat modeling, secure architecture, vulnerability management, security testing and remediation, CI/CD/DevSecOps controls, AI security integration, bug bounty triage, developer training, and cross-functional security consulting to scale secure-by-design practices.
Top Skills:
Ci/CdClaude EnterpriseContainer Security ScannersContainerized ApplicationsCursorCybersecurity Ai (Cai)DastDevsecopsGoJavaJavaScriptKubernetesNist Ai Risk Management FrameworkOpenssf Ai/Ml Security FrameworkOwasp Ai Security And Privacy GuidePythonRubySastScaTypescript
What you need to know about the NYC Tech Scene
As the undisputed financial capital of the world, New York City is an epicenter of startup funding activity. The city has a thriving fintech scene and is a major player in verticals ranging from AI to biotech, cybersecurity and digital media. It also has universities like NYU, Columbia and Cornell Tech attracting students and researchers from across the globe, providing the ecosystem with a constant influx of world-class talent. And its East Coast location and three international airports make it a perfect spot for European companies establishing a foothold in the United States.
Key Facts About NYC Tech
- Number of Tech Workers: 549,200; 6% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Capgemini, Bloomberg, IBM, Spotify
- Key Industries: Artificial intelligence, Fintech
- Funding Landscape: $25.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Greycroft, Thrive Capital, Union Square Ventures, FirstMark Capital, Tiger Global Management, Tribeca Venture Partners, Insight Partners, Two Sigma Ventures
- Research Centers and Universities: Columbia University, New York University, Fordham University, CUNY, AI Now Institute, Flatiron Institute, C.N. Yang Institute for Theoretical Physics, NASA Space Radiation Laboratory
