Cloud Cybersecurity Engineer

ABOUT FANDUEL GROUP 

FanDuel Group is a world-class team of brands and products all built with one goal in mind — to give fans new and innovative ways to interact with their favorite games, sports, teams, and leagues. That’s no easy task, which is why we’re so dedicated to building a winning team. And make no mistake, we are here to win, but we believe in winning right. That means we’ll never compromise when it comes to looking out for our teammates. From our many opportunities for professional development to our generous insurance and paid leave policies, we’re committed to making sure our employees get as much out of FanDuel as we ask them to give.  

FanDuel Group is based in New York, with offices in California, New Jersey, Florida, Oregon and Scotland. Our brands include: 
 

• FanDuel — A game-changing real-money fantasy sports app 
• FanDuel Sportsbook — America’s #1 sports betting app 
• TVG — The best-in-class horse racing TV/media network and betting platform 

• FanDuel Racing — A horse racing app built for the average sports fan 
• FanDuel Casino & Betfair Casino — Fan-favorite online casino apps 
• FOXBet — A world-class betting platform and affiliate of FanDuel Group 
• PokerStars — The premier online poker product and affiliate of FanDuel Group 

THE POSITION 

Our roster has an opening with your name on it 

Cybersecurity is a rapidly changing, and critical role in our modern technical world. If you are a strong technologist, with well rounded foundational knowledge and skills in Devops, SRE, Automation and Cloud, FanDuel is willing to invest in your growth and development. We are looking for people utilizing sound logic and reason, excellent solution focused problem solving and are excited to learn security.

As a valued member of the Information Security team, the Cloud Cybersecurity Engineer will be responsible for building highly secure and scalable solutions while maintaining the customer-oriented innovation and operational excellence that defines FanDuel Group (FDG). A Cloud Security Engineer develops, deploys, maintains, and enhances protection, detection and alerting on cloud-based and hybrid infrastructure, services, applications and networks. This role requires strong technical skills to implement security solutions in a variety of computing architectures and operating systems, to include cloud (AWS, GCP, O365) and on-prem (Windows and Linux servers) for client-side applications and the FDG workforce.

Collaboration with security analysts, GRC, developers, vendors and business units to constantly improve the overall security posture will be the key to success at FanDuel Group. We’re looking for a team player with creative problem-solving skills.

THE GAME PLAN 

Everyone on our team has a part to play 

• Responsible for the design and engineering of security solutions for an ever-evolving hybrid cloud environment
• Help develop new designs and security strategies across cloud-based applications, including infrastructure, platform, and SaaS.
• Experience working with vendor APIs and integrating with Security Information and Event Management (SIEM) platforms and ticketing systems is preferred. Develop code for collecting and injecting data from security vendors API’s
• Validate security configurations, including firewalls, intrusion detection/prevention systems, web applications firewalls, and network/endpoint detection and response platforms
• Support, delivery, integrate, and implement security solutions to defend against advanced cyberattacks, hacking and persistent threats
• Participate in proof-of-concepts for new security technologies
• Maintain, support and improve security architecture
• Participate in infrastructure and application projects to advise other Enterprise teams of security best practices
• Continuously automate repeated tasks and processes
• Security incident response, including supporting the identification and remediation of infrastructure related security incidents.
• Be responsible for all aspects of security and ensure remediation of issues and/or automated methods to inhibit violations of security
• Support and validate cryptography and encryption in the cloud.
• Support cloud infrastructure teams, making recommendations, and continually improving cloud security technologies.
• Develop business relationships and integrate activities with other departments to ensure successful implementation and support project efforts.
• Will collaborate closely with other security teams (SOC, GRC, IAM and DevSecOps)
• Working with analysts, engineers, and data scientists across the organization to continually improve cyber resilience.
• Maintain contact with vendors, industry peers, and professional associations to keep informed of existing and evolving industry standards, technologies, and cyber threats
• Provisioning and deployment of secure applications within hybrid cloud environments
• Design and apply Immutable Infrastructure and Infrastructure as code principles

THE STATS 

What we’re looking for in our next teammate   

• Preferred experience working with Information Security teams increasing responsibility and implementing security initiatives.
• Minimum of 3 years of experience securing hybrid cloud and containerized applications is required.
• Automation of security process flows and security tests for containerized applications
• Bachelor of Science in Electrical/Computer Engineering, Information Security, or similar degree preferred
• At least one of the following certifications with combined experience:   CISSP, CCSK, CCSP, CEH, OSCP
• Code in one or more programming languages, such as Python, Go or Java. Bash, and/or PowerShell scripting experience
• Knowledge of working with vendor API’s to automate tasks
• SIEM querying, alerting and integration capabilities.
• Knowledge of cloud security and design of security on large-scale applications supporting high throughput dynamic loads
• Awareness of PCI/CCPA/PII/GDPR rules, and compliance
• Excellent verbal and written communication skills
• Knowledge of the OWASP Top 10 web application security risks and how to minimize them
• Strong general knowledge of foundational technologies, including networking, engineering and development skillsets.
• DevOps and SRE experience preferred.

THE CONTRACT 

We treat our team right 
 
Competitive compensation is just the beginning. As part of our team, you can expect: 

• An exciting and fun environment committed to driving real growth 
• Opportunities to build really cool products that fans love 
• Mentorship and professional development resources to help you refine your game  
• Flexible vacation allowance to let you refuel 
• Hall of Fame benefit programs and platforms 

FanDuel Group is an equal opportunities employer. Diversity and inclusion in FanDuel means that we respect and value everyone as individuals. We don't tolerate bias, judgement or harassment. Our focus is on developing employees so that they reach their full potential. 

#LI-Remote