About the Role
Define and deliver multi-year security initiatives, setting the direction for secure engineering practices at scale. Identify and mitigate risks, shaping technical and organizational capabilities. Mentor security talent and address program gaps.
Responsibilities
- Define multi-year vision and strategy for Product Security engagement with engineering, establishing secure design standards.
- Partner with leadership to integrate security as a primary input into engineering strategy.
- Set direction for AI/LLM security architecture, defining controls, patterns, frameworks, and governance for safe AI product deployment.
- Evolve threat modeling, penetration testing, and risk assessment methodologies, leading high-stakes engagements.
- Evolve bug bounty and vulnerability disclosure programs (e.g., HackerOne), integrating external findings for systemic improvements.
- Build automation and tooling for scalable, repeatable, secure-by-default systems.
- Lead and evolve the Security Champions program, embedding security judgment across engineering teams.
- Drive maturation of vulnerability and risk management program, including data, systems, and reporting.
- Own and maintain a library of reusable security reference architectures and design patterns, keeping them current with technology and threat evolution.
- Mentor engineers, shape technical culture, and develop future security leaders.
- Adapt role to fill technical or organizational gaps as the program evolves.
Requirements
- Demonstrated track record of defining and delivering multi-year security strategy in ambiguous, fast-moving environments.
- Proven expertise in AI/LLM security architecture, including threat landscape, mitigation patterns, and governance models for safe AI adoption at scale.
- Experience leading and evolving threat modeling, penetration testing, and risk assessment programs at scale, including personally leading high-stakes engagements.
- Experience working within or evolving bug bounty or vulnerability disclosure programs (e.g., HackerOne), ensuring external findings lead to systemic change.
- Track record of maturing vulnerability and risk management programs, including data, systems, and reporting capabilities.
- Track record of building automation and tooling to scale security capabilities and reduce toil.
- Deep experience building and scaling reusable security patterns and assets across an engineering organization.
- Experience mentoring senior engineers and shaping technical culture across an organization.
Skills
- Broad and deep expertise across multiple security practices.
- Modern cloud infrastructure (AWS, GCP, Azure)
- CI/CD pipelines
- Software development environments at scale
- Strong coding skills (Python, Go, or similar)
- Industry security frameworks (NIST, ISO 27001, OWASP, MITRE ATT&CK, SOC 2)
Work Type
- Hybrid
Experience Level
- Extensive security engineering experience
Salary/Compensations
- $184,000 - $241,500 USD
Benefits
- Health plans (some as low as $0 per paycheck)
- Medical, vision, and dental insurance
- Life insurance
- Disability insurance
- Fertility and family planning programs
- Mental health support
- Fitness benefits
- Generous paid time off (PTO, sick leave, personal time off)
- 14 paid company holidays
- Annual bonus opportunities (performance-based)
- Long-term incentive opportunities (performance-based)
- Short-term incentive compensation (e.g., cash bonuses)
- Stock program participation
- 401(k) with up to a 5% match
- Commuter benefits
- Pet insurance
About the Company
- FanDuel Group is a premier mobile gaming company in the United States and Canada.
- Portfolio includes FanDuel Sportsbook, FanDuel Casino, FanDuel Racing, and daily fantasy sports.
- Operates FanDuel TV (linear cable network) and FanDuel TV+ (direct-to-consumer OTT platform).
- Presence across all 50 US states, Canada, and Puerto Rico.
- Based in New York with US offices in Los Angeles, Atlanta, Jersey City, and global offices in Canada and Scotland.
- Affiliates have offices worldwide, including Ireland, Portugal, Romania, and Australia.
- Subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator (NYSE: FLUT).
Equal Opportunity
- FanDuel is an equal opportunities employer committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe in valuing, respecting, and including all employees.
- Committed to providing reasonable accommodations for qualified individuals with disabilities; contact Benefits@fanduel.com for workplace accommodation or adjustment during application and hiring.
