Base Salary
$184k - $242k/yr
Responsibilities
- Define the multi-year vision, strategy, and standards for Product Security’s engagement with engineering.
- Partner with business and engineering leadership to incorporate security into engineering strategy and resolve trade-offs.
- Set the direction for AI/LLM security architecture, controls, assessment frameworks, and governance across FanDuel.
- Evolve and lead threat modeling, penetration testing, and risk assessment methodologies and high-stakes engagements.
- Evolve the HackerOne bug bounty and vulnerability disclosure programs and connect external findings to systemic improvements.
- Build automation and tooling for scalable, repeatable secure-by-default systems.
- Lead and evolve the Security Champions program across engineering teams.
- Mature vulnerability and risk management data, systems, and reporting capabilities.
- Own and maintain reusable security reference architectures and design patterns.
- Mentor engineers, shape technical culture, and develop future security leaders.
- Fill technical or organizational gaps as the security program evolves and perform other assigned duties.
Requirements
- Extensive security engineering experience with broad and deep expertise across multiple security practices.
- Demonstrated experience defining and delivering multi-year security strategy in ambiguous, fast-moving environments.
- Proven expertise in AI/LLM security architecture, threat landscapes, mitigation patterns, and governance models.
- Experience leading threat modeling, penetration testing, and risk assessment programs at scale, including high-stakes engagements.
- Experience strategically evolving a HackerOne or similar bug bounty or vulnerability disclosure program.
- Experience maturing vulnerability and risk management programs, including supporting data, systems, and reporting capabilities.
- Track record of building automation and tooling that scales security capabilities and reduces toil.
- Deep familiarity with modern cloud infrastructure, CI/CD pipelines, and software development environments at scale.
- Deep experience building and scaling reusable security patterns and assets across an engineering organization.
- Strong coding skills in at least one modern programming language such as Python or Go.
- Solid command of NIST, ISO 27001, OWASP, MITRE ATT&CK, and SOC 2 frameworks.
- Experience mentoring senior engineers and shaping technical culture across an organization.
Benefits
- Health, vision, and dental insurance
- Fertility and family-planning programs
- Mental-health support and fitness benefits
- Paid time off, sick leave, and 14 paid company holidays
- 401(k) with up to a 5% company match
- Commuter benefits and pet insurance
- Paid disability and life insurance
- Short-term and long-term incentive opportunities
- Hybrid work arrangement indicated by the #LI-Hybrid posting tag
About FanDuel
FanDuel Group is an innovative sports-tech entertainment company that is changing the way consumers engage with their favorite sports, teams, and leagues. The premier gaming destination in the North America, FanDuel Group consists of a portfolio of leading brands across gaming, sports betting, daily fantasy sports, advance-deposit wagering, and TV/media, including FanDuel, Stardust Casino and TVG. The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia. FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT). Learn more about what we do at: https://www.fanduel.com/about https://twitter.com/FanDuel https://twitter.com/FDsportsbook https://twitter.com/FanDuelCasino https://www.facebook.com/fanduel/ https://www.instagram.com/fanduel/ https://instagram.com/FDsportsbook/ https://www.youtube.com/FanDuel