Responsibilities
- Establish security processes and best practices for mobile, on-premises, and cloud-based platforms.
- Advise product and development teams on application security, threat modeling, security reviews, vulnerabilities, remediation controls, and secure coding.
- Perform threat modeling, secure design reviews, source code reviews, security assessments, security testing, and vulnerability scan validation.
- Develop and maintain Secure SDLC processes, software maturity models, security tooling, and secure coding programs.
- Integrate and automate SAST, DAST, container security scanning, open-source security analysis, and other security controls in development and deployment workflows.
- Develop and customize defensive security tools and rules to detect and address malicious activity.
- Establish supply chain security processes and verify that third-party software meets security standards.
- Triage, reproduce, track, and remediate application security issues in partnership with development teams.
- Support the bug bounty program and preparation of security releases.
- Mentor and train development teams and continuously adapt security practices to emerging adversarial techniques.
Requirements
- At least three years of experience is required.
- A bachelor’s degree in computer science, information systems, or an equivalent combination of education and experience is required.
- At least one information security certification is required: CISSP, CEH, GIAC CPEN, OSCP, OSWE, CWAPT, GWAPT, or GWEB.
- Strong communication and technical skills, with the ability to work independently and within a distributed team, are expected.
Benefits
- Career growth opportunities, work-life balance, and employee well-being are emphasized.
- The company promotes diversity and inclusion and offers company perks and benefits.
- The role supports a global, distributed organization with mobile, cloud-based, and on-premises platforms.
Categories
About Fanatics
Fanatics is committed to relentlessly enhancing the fan experience. As a leading global sports platform, Fanatics allows fans to buy, bet, and collect while engaging with sports in deeper, more immersive ways. Fanatics is redefining how fans connect with their favorite teams and players. Through its businesses—Fanatics Commerce, Fanatics Collectibles, Fanatics Betting & Gaming, Fanatics Events, Fanatics Markets, and Fanatics Studios—the company has built a powerful, integrated ecosystem. By bringing together licensed fan gear, physical and digital trading cards, live events, and more, Fanatics delivers personalized experiences to over 100 million fans worldwide. Fanatics currently holds partnerships with over 900 sports properties, including professional and college teams, leagues, players’ associations, and retail partners. Fanatics also partners with over 5,000 athletes and celebrities, including 250 exclusive partnerships, and has over 2,000 retail locations. Beyond these partnerships, Fanatics has its own powerhouse team of more than 22,000 global employees.