Principal Security Engineer

Principal Security Engineer

Love sports? Attracted to the startup hustle? This role might be perfect for you!

PrizePicks is the largest independently owned Daily Fantasy Sports (DFS) platform in North America. Centered around real-money more/less predictions, PrizePicks allows sports fans to play against the numbers rather than each other, and it is the simplest variety of daily fantasy sports with the widest breadth of sports coverage of any DFS operator. Boasting partnerships to date with the Atlanta Falcons, Atlanta Braves, and Miami Marlins, as well as Ghost Gaming, PrizePicks is currently the closest legal alternative to legal mobile sports betting in the majority of the United States. With an existing digital footprint covering more than 70 percent of the U.S. population, PrizePicks is the most accessible type of game for the masses. 

The company is headquartered in Atlanta, remote is an option for the immediacy of this position. If you would like to view our product, it can be found on the App Store and Google Play, as well as on the web at prizepicks.com.

Our Security team works in Engineering on the Infrastructure team to further develop our security practices, write and implement security policies, advise on best practices while implementing tooling to protect the company and our remarkable customers.

If this resonates with you, join the hundreds of us building a shared vision for the future of sports entertainment.

• Define and drive the adoption, improvement, and governance of the Cloud Information Security Program.

• Define, build and implement PrizePicks’s cloud security strategy and regularly assess the technical and resource needs to support the long-term vision for the program.

• Evaluate business and technical requirements to identify and implement tools, processes, and technologies to improve our security posture in our cloud environments.

• Coordinate the orchestration, automation, and management of cloud native tools as well as 3rd party vendor solutions.

• Engage with stakeholders to help architect with adequate security and resiliency features in cloud environments.

• Drive Security Operations during incident response and investigations.

• Maintain and improve the cloud security control framework in support of corporate-wide programs.

• Maintain and improve the cloud information security program documentation structure, supporting templates, and standard procedures.

• Serve as a subject-matter-expert for cloud security and act as a first point of contact for critical issues, security risk assessments, third-party audits, and regulatory requirements.

• 7-10 years of relevant work experience.

• At least 3 years of strategic technical leadership experience in Information Security.

• Deep knowledge of cloud security and posture management with an ability to think like a bad actor and use context to build threat models.

• Ability to define risks both in technical and non-technical terms with business-relevant language.

• Strong experience with the ability to architect and implement measures both within the software development life-cycle and surrounding infrastructure.

• Certification from GIAC or similarly accredited organization with appropriate scope toward the role.

Technical must haves:

• Cloud information security management systems

• Scripting Language Expertise (Shell, Ruby, Python)

• Penetration testing tooling

• SIEM tooling

• Implementing distributed software systems

• Linux or similar UNIX type operating systems

• Kubernetes and other containerized compute services

In addition to your competitive salary, medical/dental/vision coverage plans and matching 401(k), we’ll shower you with perks including: 

• Break room with ping pong, end endless snacks and in-office lunch once a week

• Unlimited PTO to encourage a healthy work/life balance

• A modern work schedule focused on getting the job done well, not hours clocked

• Company and team outings, we encourage a tight-knit workplace

• Open office layout promotes collaboration, conversation and teamwork to drive results

• Significant opportunity for growth and career development

• Remote or Onsite (Atlanta, GA)

PrizePicks is an Equal Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status. 

#LI-Remote