PrizePicks · 13 hours ago
Senior Security Engineer - DevSecOps
PrizePicks is the fastest-growing sports company in North America, recognized for its leading platform for Daily Fantasy Sports. The Senior Security Engineer - DevSecOps will manage security practices, implement security policies, and collaborate with teams to ensure security is embedded in the development and deployment processes.
Fantasy SportsGamingSports
Responsibilities
Manage and maintain edge and bot protection (e.g., WAF, CDN, DDoS mitigation)
Perform security-focused infrastructure reviews for new product releases and architectural changes
Implement and maintain monitoring and alerting tools to detect cloud and container-related vulnerabilities and misconfigurations
Collaborate with DevOps and Engineering teams to embed security into CI/CD pipelines and deployment processes without slowing down delivery
Partner with Application Security and Engineering to implement security controls on opportunities identified during Threat Modeling
Lead initiatives around infrastructure-as-code (IaC) security and runtime protection to automate security controls and hardening
Assist with threat modeling, risk assessments, and provide security guidance during the development lifecycle
Collaborate with incident response teams, offering expert advice on cloud-related security issues to help resolve incidents quickly
Develop tooling or automation to support proactive remediation and continuous security validation
Track and report DevSecOps KPIs, such as mean time to remediate, security control coverage, and vulnerability trends
Qualification
Required
5+ years in DevSecOps, Security Engineering, or similar roles
Expertise with cloud platforms (GCP, AWS, Azure) and container orchestration (e.g., Kubernetes, ECS)
Experience with cloud and container security tooling
Strong understanding of WAFs, bot mitigation, API gateways, and CDN security features
Proven experience performing secure design and architecture reviews
Proficiency with IaC tools (Terraform, OpenTofu, Helm, etc.) and integrating security scanners into pipelines
Preferred
Extensive hands-on experience with Terraform, OpenTofu, and/or Crossplane
Experience with CrowdStrike
Solid understanding of CI/CD principles and experience with GitHub Actions and ArgoCD
Solid understanding of networking principles (e.g., VPCs, load balancing, firewalls) in a cloud environment
Knowledge of database management (SQL and NoSQL)
Relevant certifications (e.g., Kubernetes and Cloud Native Security Associate, Certified Kubernetes Security Specialist, Google Professional Cloud Security Engineer, AWS Certified DevOps Engineer, AWS Certified Security - Specialty, Certified Kubernetes Administrator)
Benefits
Company-subsidized medical, dental, & vision plans
401(k) plan with company match
Annual bonus
Flexible PTO to encourage a healthy work/life balance (2 weeks STRONGLY encouraged!)
Generous paid leave programs, including 16-week paid parental leave and disability benefits
Workplace flexibility and modern work schedules focused on getting the job done, not hours clocked
Company-wide in-person events and team outings
Lifestyle enhancement program
Company equipment provided (Windows & Mac options)
Annual performance reviews with opportunities for growth and career development
Company
PrizePicks
PrizePicks is a mobile app platform that covers sports betting of leagues.
Funding
Current Stage
Late StageTotal Funding
$0.85MKey Investors
Phoenix Capital Ventures (PCV)
2025-09-22Acquired
2021-12-01Series A
2020-07-08Seed· $0.85M
Leadership Team
Recent News
PR Newswire
2026-02-04
2026-01-17
Morningstar.com
2026-01-16
Company data provided by crunchbase