Security Engineer
As a Security Engineer on our Software Security team, you'll deliver security projects that support quarterly team goals and reduce risk across the products and services FanDuel ships. Working closely with engineering teams across the organization, you'll identify risk, design solutions, and build the tooling and automation that make secure development repeatable at scale. You're equally comfortable writing code and reviewing systems for security gaps, and you bring hands-on curiosity and growing expertise in AI/LLM security as that space rapidly evolves.
- Deliver security projects that support quarterly team goals, working independently and seeking input when the path forward isn't clear.
- Partner with engineering teams to identify security risks early, from design and code review through CI/CD, deployment, and production.
- Build automation and tooling that makes secure development the path of least resistance for engineering teams across FanDuel.
- Design and implement AI Agents that automate and enforce security controls across the SDLC.
- Apply emerging AI/LLM security knowledge to identify, assess, and mitigate risks in AI-powered products, including prompt injection, model supply chain, and data exposure threats.
- Collaborate with partner teams to champion security standards, best practices, and risk trade-offs.
- Adapt your role to fill technical gaps as the program evolves.
- Other duties as required.
- Hands-on security engineering experience embedded in the software development lifecycle, with a working understanding of how risk surfaces across design, build, and deployment stages. (required)
- Solid coding skills in at least one modern language (Python, Go, or similar). (required)
- Strong understanding of software design principles and secure coding practices, with the ability to build security tooling that is maintainable, scalable, and built to production standards. (required)
- Experience designing and implementing AI Agents or similar automated systems that enforce security controls across engineering workflows. (required)
- Familiarity with AI/LLM security risks including prompt injection, model supply chain vulnerabilities, and data exposure, with an appetite to grow your expertise as the threat landscape evolves. (required)
- Familiarity with modern cloud infrastructure (AWS, GCP, or Azure) and software development environments. (required)
- Working knowledge of industry frameworks (OWASP, MITRE ATT&CK, NIST, or similar) and a practical sense of when and how to apply them. (required)
- Ability to perform risk analyses that help cross-functional partners weigh trade-offs and make informed decisions. (required)
- Ability to review code for security vulnerabilities across one or more modern languages, with familiarity in common weakness patterns such as injection, authentication flaws, and insecure data handling. (required)
- The applicable salary range for this position is $134,000 - $168,000 USD.
- This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits.
- This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation.
- This role includes paid personal time off and 14 paid company holidays.
- FanDuel offers paid sick time in accordance with all applicable state and federal laws.
FanDuel Group is an innovative sports-tech entertainment company that is changing the way consumers engage with their favorite sports, teams, and leagues. The premier gaming destination in the North America, FanDuel Group consists of a portfolio of leading brands across gaming, sports betting, daily fantasy sports, advance-deposit wagering, and TV/media, including FanDuel, Stardust Casino and TVG. The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia. FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).
