Senior Security Engineer

PrizePicks is a sports technology company and leading platform for Daily Fantasy Sports. The company is seeking a Senior Security Engineer to scale and mature its Cloud, Container, and Edge Security programs by engineering security guardrails, automating threat detection, and integrating enforcement into CI/CD pipelines and infrastructure. The role partners with Engineering, Infrastructure, and Application Security teams to secure cloud environments, containerized workloads, and edge boundaries.

Responsibilities:

• Define, drive, and execute the long-term technical roadmap for Cloud, Container, and Edge Protection programs
• Manage and maintain edge and bot protection (e.g., WAF, CDN, DDoS mitigation)
• Perform security-focused infrastructure reviews for new product releases and architectural changes
• Implement and maintain monitoring and alerting tools to detect cloud and container-related vulnerabilities and misconfigurations
• Own container image security — vulnerability scanning and remediation at the base image layer, and building the gating needed to keep unpatched or non-compliant images out of production
• Collaborate with Infrastructure and Engineering teams to embed security into CI/CD pipelines and deployment processes without slowing down delivery
• Partner with Application Security and Engineering to implement security controls on opportunities identified during Threat Modeling
• Lead initiatives around infrastructure-as-code (IaC) security and runtime protection to automate security controls and hardening
• Identify security control gaps across cloud, container, and network infrastructure, and drive them to resolution — proposing the fix and staging the implementation (e.g., a Terraform PR) for Infrastructure to review and approve
• Assist with threat modeling, risk assessments, and provide security guidance during the development lifecycle
• Collaborate with incident response teams, offering expert advice on cloud-related security issues to help resolve incidents quickly
• Develop tooling or automation to support proactive remediation and continuous security validation
• Track and report DevSecOps KPIs, such as mean time to remediate, security control coverage, and vulnerability trends
• Mentor engineers across the security org and set technical standards for how the team approaches cloud and container security

Requirements:

• 5+ years in DevSecOps, Security Engineering, or similar roles
• Experience owning a security program or initiative end-to-end, from roadmap to execution, including influencing engineering teams outside your reporting line
• Expertise with cloud platforms (GCP, AWS, Azure) and container orchestration (e.g., Kubernetes, ECS)
• Experience with cloud and container security tooling
• Strong understanding of WAFs, bot mitigation, API gateways, and CDN security features
• Proven experience performing secure design and architecture reviews
• Proficiency with IaC tools (Terraform, OpenTofu, Helm, etc.) and integrating security scanners into pipelines
• While we prefer candidates based in Atlanta, we are open to qualified applicants from anywhere in the U.S. and are willing to consider remote candidates
• You must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time
• Extensive hands-on experience with Terraform, OpenTofu, and/or Crossplane
• Experience with CrowdStrike
• Solid understanding of networking principles (e.g., VPCs, load balancing, firewalls) in a cloud environment
• Knowledge of database management (SQL and NoSQL)
• Relevant certifications (e.g., Kubernetes and Cloud Native Security Associate, Certified Kubernetes Security Specialist, Google Professional Cloud Security Engineer, AWS Certified DevOps Engineer, AWS Certified Security - Specialty, Certified Kubernetes Administrator)