Senior Enterprise Security Engineer
FanDuel is looking for a Senior Enterprise Security Engineer to design and build the software and systems that secure its global device fleet at scale. The role involves owning the architecture and implementation of endpoint security solutions, which includes writing production-grade code, building automation frameworks, and designing secure-by-default device baselines.
This is a hands-on technical position where the engineer partners across Security, Enterprise Technology, and other departments to translate complex endpoint challenges into coherent platform solutions that enforce security controls. The engineer also acts as a technical leader within the Cyber Defense Engineering organisation, providing mentorship and code reviews to early-career team members.
- Define security strategy across FanDuel's global infrastructure, including conducting threat modelling, leading architectural decisions, mentoring security engineers, and driving zero-trust program maturity.
- Own technical projects end-to-end, including developing endpoint security platforms using Python, Go, or similar languages, building CI/CD pipelines for infrastructure-as-code, and establishing GitOps workflows for policy deployment and drift detection.
- Monitor security events, investigate incidents, and build detection pipelines that surface endpoint compromise, data exfiltration, and policy violations.
- Mentor early-career engineers through design reviews, code feedback, and technical coaching to help them grow and establish high standards for detection quality and operational procedures.
- Proactively identify and address platform risks, technical debt, and emerging opportunities.
- Use AI as a force multiplier for automation, threat detection, and operational efficiency across the platform.
- Hands-on information security experience in at least one of the following domains: security engineering, threat detection, incident response, or endpoint protection (required).
- Intermediate proficiency in one or more systems or software engineering languages (Python, Go) with a track record of writing production-grade code to automate endpoint management and build security tools (required).
- Understanding of endpoint and mobile security ecosystems, including EDR, DLP, MDM/MCM, endpoint protection, encryption, attestation, and zero-trust device trust across macOS, iOS, Android, and Windows (required).
- Hands-on experience deploying and operating enterprise security tools (Jamf Pro, Microsoft Intune, FleetDM, CrowdStrike Falcon, Okta Verify, or similar) in multi-OS production environments (required).
- Hands-on experience with infrastructure-as-code and GitOps workflows (Terraform, Ansible, Chef, or equivalent), including designing CI/CD pipelines for configuration management and policy deployment (required).
- Strong analytical and troubleshooting skills, with the ability to diagnose complex infrastructure and security issues, translate fixes to non-technical stakeholders, and document learnings (required).
- Comfort working in a rapidly evolving environment and dealing with ambiguity (required).
- Experience building or improving threat detection pipelines, conducting threat modelling, or running incident response investigations, with knowledge of adversary tactics and detection best practices (preferred).
- Scripting depth in Bash and/or PowerShell for operational automation (preferred).
- Experience with infrastructure from major cloud providers (AWS, GCP, Azure) and enterprise SaaS platforms at scale (preferred).
- Relevant security certifications (CISSP, CISA, CISM, CEH, Security+, or CCSP) or contributions to open-source security projects (nice-to-have).
- Demonstrated ability to communicate complex security concepts to both technical and non-technical audiences, including leadership (required).
- Health plans including programs for fertility and family planning, mental health support, and fitness benefits.
- Generous paid time off (PTO and sick leave).
- Annual bonus and long-term incentive opportunities.
- 401k with up to a 5% match.
- Commuter benefits.
- Pet insurance.
- 14 paid company holidays.
FanDuel Group is an innovative sports-tech entertainment company that is changing the way consumers engage with their favorite sports, teams, and leagues. The premier gaming destination in the North America, FanDuel Group consists of a portfolio of leading brands across gaming, sports betting, daily fantasy sports, advance-deposit wagering, and TV/media, including FanDuel, Stardust Casino and TVG. The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia. FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).