Note: The job is a remote job and is open to candidates in USA. PrizePicks is a rapidly growing sports company and leading Daily Fantasy Sports platform in North America. The company is seeking a Senior Security Engineer to scale and mature Cloud, Container, and Edge Security programs by engineering security guardrails, automating threat detection, and embedding enforcement into CI/CD pipelines and infrastructure. The role partners with Engineering, Infrastructure, Application Security, and incident response teams to secure cloud environments, containerized workloads, and edge boundaries.
Responsibilities
- Define, drive, and execute the long-term technical roadmap for Cloud, Container, and Edge Protection programs
- Manage and maintain edge and bot protection (e.g., WAF, CDN, DDoS mitigation)
- Perform security-focused infrastructure reviews for new product releases and architectural changes
- Implement and maintain monitoring and alerting tools to detect cloud and container-related vulnerabilities and misconfigurations
- Own container image security — vulnerability scanning and remediation at the base image layer, and building the gating needed to keep unpatched or non-compliant images out of production
- Collaborate with Infrastructure and Engineering teams to embed security into CI/CD pipelines and deployment processes without slowing down delivery
- Partner with Application Security and Engineering to implement security controls on opportunities identified during Threat Modeling
- Lead initiatives around infrastructure-as-code (IaC) security and runtime protection to automate security controls and hardening
- Identify security control gaps across cloud, container, and network infrastructure, and drive them to resolution — proposing the fix and staging the implementation (e.g., a Terraform PR) for Infrastructure to review and approve
- Assist with threat modeling, risk assessments, and provide security guidance during the development lifecycle
- Collaborate with incident response teams, offering expert advice on cloud-related security issues to help resolve incidents quickly
- Develop tooling or automation to support proactive remediation and continuous security validation
- Track and report DevSecOps KPIs, such as mean time to remediate, security control coverage, and vulnerability trends
- Mentor engineers across the security org and set technical standards for how the team approaches cloud and container security
Skills
- 5+ years in DevSecOps, Security Engineering, or similar roles
- Experience owning a security program or initiative end-to-end, from roadmap to execution, including influencing engineering teams outside your reporting line
- Expertise with cloud platforms (GCP, AWS, Azure) and container orchestration (e.g., Kubernetes, ECS)
- Experience with cloud and container security tooling
- Strong understanding of WAFs, bot mitigation, API gateways, and CDN security features
- Proven experience performing secure design and architecture reviews
- Proficiency with IaC tools (Terraform, OpenTofu, Helm, etc.) and integrating security scanners into pipelines
- You must be authorized to work for any employer in the U.S
- We are unable to sponsor or take over sponsorship of an employment Visa at this time
- Extensive hands-on experience with Terraform, OpenTofu, and/or Crossplane
- Experience with CrowdStrike
- Solid understanding of networking principles (e.g., VPCs, load balancing, firewalls) in a cloud environment
- Knowledge of database management (SQL and NoSQL)
- Relevant certifications (e.g., Kubernetes and Cloud Native Security Associate, Certified Kubernetes Security Specialist, Google Professional Cloud Security Engineer, AWS Certified DevOps Engineer, AWS Certified Security - Specialty, Certified Kubernetes Administrator)
Benefits
- Company-subsidized medical, dental, & vision plans
- 401(k) plan with company match
- Annual bonus
- Flexible PTO to encourage a healthy work/life balance (2 weeks STRONGLY encouraged!)
- Generous paid leave programs, including 16-week paid parental leave and disability benefits
- Workplace flexibility and modern work schedules focused on getting the job done, not hours clocked
- Company-wide in-person events and team outings
- Lifestyle enhancement program
- Company equipment provided (Windows & Mac options)
- Annual performance reviews with opportunities for growth and career development
Company Overview