Base Salary
$184k - $242k/yr
Responsibilities
- Define the multi-year vision, strategy, and standards for Product Security’s engagement with engineering.
- Partner with business and engineering leadership to incorporate security into engineering strategy and resolve trade-offs.
- Set the direction for AI/LLM security architecture, controls, assessment frameworks, and governance models.
- Evolve threat modeling, penetration testing, and risk assessment methodologies and lead high-stakes engagements.
- Evolve FanDuel’s HackerOne bug bounty and vulnerability disclosure programs and connect external findings to systemic improvements.
- Build automation and tooling that creates scalable, repeatable secure-by-default systems.
- Lead and evolve the Security Champions program across engineering teams.
- Mature vulnerability and risk management data, systems, and reporting capabilities.
- Own and maintain reusable security reference architectures and design patterns.
- Mentor engineers, shape technical culture, and help develop future security leaders.
- Adapt to technical or organizational gaps as the security program evolves.
Requirements
- Extensive security engineering experience with broad and deep expertise across multiple security practices.
- Demonstrated experience defining and delivering multi-year security strategy in ambiguous, fast-moving environments.
- Proven expertise in AI/LLM security architecture, including threats, mitigation patterns, and governance models.
- Experience leading threat modeling, penetration testing, and risk assessment programs at scale.
- Experience strategically evolving a bug bounty or vulnerability disclosure program, including HackerOne or similar platforms.
- Experience maturing vulnerability and risk management programs and their supporting data, systems, and reporting capabilities.
- Track record of building scalable security automation, tooling, reusable security patterns, and organizational assets.
- Deep familiarity with modern cloud infrastructure, CI/CD pipelines, and software development environments at scale.
- Strong coding skills in at least one modern programming language, such as Python or Go.
- Solid command of NIST, ISO 27001, OWASP, MITRE ATT&CK, and SOC 2 frameworks.
- Experience mentoring senior engineers and shaping technical culture across an organization.
Benefits
- Health, vision, and dental insurance
- Fertility and family-planning programs
- Mental-health support and fitness benefits
- Paid time off, sick leave, and 14 paid company holidays
- Annual bonus and long-term incentive opportunities
- 401(k) with up to a 5% match
- Commuter benefits and pet insurance
- Short- and long-term incentive compensation, including potential cash bonuses and stock participation
- Hybrid work arrangement indicated
About FanDuel
FanDuel Group is an innovative sports-tech entertainment company that is changing the way consumers engage with their favorite sports, teams, and leagues. The premier gaming destination in the North America, FanDuel Group consists of a portfolio of leading brands across gaming, sports betting, daily fantasy sports, advance-deposit wagering, and TV/media, including FanDuel, Stardust Casino and TVG. The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia. FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT). Learn more about what we do at: https://www.fanduel.com/about https://twitter.com/FanDuel https://twitter.com/FDsportsbook https://twitter.com/FanDuelCasino https://www.facebook.com/fanduel/ https://www.instagram.com/fanduel/ https://instagram.com/FDsportsbook/ https://www.youtube.com/FanDuel