200+ applicants

Company

Original Job Post

PrizePicks · 4 days ago

Senior Security Engineer

United States

Full-time

Remote

Senior Level

7+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Fantasy SportsGaming

Growth Opportunities

Insider Connection @PrizePicks

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Define and drive the adoption, improvement, and governance of the Cloud Information Security Program.

Define, build, and implement PrizePicks’s cloud security strategy and assess the technical and resource needs for the program.

Identify and implement tools, processes, and technologies to enhance security posture in cloud environments.

Orchestrate, automate, and manage cloud native tools and 3rd party vendor solutions.

Engage with stakeholders to architect security and resiliency features in cloud environments.

Lead Security Operations during incident response and investigations.

Maintain and enhance the cloud security control framework and information security program documentation.

Act as a subject-matter-expert for cloud security and handle critical issues, security risk assessments, audits, and regulatory requirements.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Strategic LeadershipInformation SecurityCloud SecurityThreat ModelingRisk DefinitionArchitecture DesignSoftware DevelopmentGIAC CertificationCloud Security ManagementScripting LanguagesPenetration TestingSIEM ToolsDistributed SystemsLinux Operating SystemsKubernetes

Required

7-10 years of relevant work experience.

At least 3 years of strategic technical leadership experience in Information Security.

Deep knowledge of cloud security and posture management with an ability to think like a bad actor and use context to build threat models.

Ability to define risks both in technical and non-technical terms with business-relevant language.

Strong experience with the ability to architect and implement measures both within the software development life-cycle and surrounding infrastructure.

Certification from GIAC or similarly accredited organization with appropriate scope toward the role.

Cloud information security management systems

Scripting Language Expertise (Shell, Ruby, Python)

Penetration testing tooling

SIEM tooling

Implementing distributed software systems

Linux or similar UNIX type operating systems

Kubernetes and other containerized compute services