2 days ago
Base Salary
$128k - $160k/yr
Responsibilities
- Partner with cross-functional teams to design, implement, and maintain endpoint security configurations, policies, and enforcement mechanisms.
- Monitor and remediate vulnerabilities across endpoint and mobile fleets while supporting patch management and compliance tracking.
- Evaluate and maintain security capabilities including data loss prevention, vulnerability management, identity and access management, web application firewalls, email protection, and endpoint protection.
- Develop scripts and automation for threat hunting, detection, digital forensics, and security workflows.
- Design and tune detection mechanisms to improve operational efficiency and observability.
- Use AI tools and workflows to accelerate threat hunting, detection, and automation efforts.
- Mentor junior team members and create runbooks, documentation, and training resources.
- Support incident response investigations involving endpoint or mobile compromise.
- Participate in a 24/7 on-call rotation for critical incident escalations.
Requirements
- 7+ years of experience as a security engineer or in a similar role.
- Strong hands-on experience securing and managing mobile devices at scale.
- Experience with vulnerability management practices and endpoint and mobile compliance tools.
- Experience participating in and leading endpoint or mobile incident investigations.
- Experience with OAuth, SAML, and OpenID Connect identity management protocols.
- Experience evaluating, selecting, or implementing enterprise security tools such as DLP, IAM, WAF, and email security solutions.
- Experience building or tuning detection logic for malicious activity.
- Experience automating security workflows through SOAR or custom scripting.
- Required experience with Python or Bash scripting.
- Experience writing standards, policies, architecture diagrams, and other high-quality documentation.
- Preferred experience with Terraform or Ansible infrastructure-as-code tools.
- Preferred experience with Cloudflare, Datadog, Wiz, and Tines.
- Relevant certifications such as GCIH, OSCP, or GSEC are a plus.
- Ability to adapt to changing priorities and communicate technical concepts to varied audiences.
Benefits
- Remote role with possible in-person interview or onboarding components, including a multi-day cultural immersion in New York City for applicable full-time, non-seasonal hires.
- Full-time employment with base salary and bonus eligibility; benefits information is provided through Fanatics’ benefits website.
- Salary range varies by country and state of residence and is listed across Fanatics Betting and Gaming geographical compensation zones.
About Fanatics
Fanatics is a New York–based digital sports platform that sells licensed team merchandise, trading cards, and operates a growing online sportsbook for fans. Its businesses span e-commerce for leagues and teams, manufacturing and distributing collectibles (including the Topps trading card brand), and betting and iGaming. The privately held company operates globally and powers official online stores and in-venue retail for major professional and college sports organizations.