<div class="content-intro"><p><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">At PrizePicks, we are the fastest-growing sports company in North America, as recognized by Inc. 5000. As the leading platform for Daily Fantasy Sports, we cover a diverse range of sports leagues, including the NFL, NBA, and Esports titles like League of Legends and Counter-Strike. Our team of over 550 employees thrives in an inclusive culture that values individuals from diverse backgrounds, regardless of their level of sports fandom. Ready to reimagine the DFS industry together? </span></p></div><p><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">We are looking for a Senior Security Engineer to scale and mature our Cloud, Container, and Edge Security programs. In this role, you will move beyond passive scanning to actively engineer guardrails, automate threat detection, and build automated enforcement gates into our CI/CD pipelines and infrastructure. You will partner closely with Engineering, Infrastructure, and Application Security teams to ensure our cloud environments, containerized workloads, and edge boundaries remain resilient and secure by default.</span></p> <p><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 18pt;"><strong>What you’ll do:</strong></span></p> <ul> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Define, drive, and execute the long-term technical roadmap for Cloud, Container, and Edge Protection programs.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Manage and maintain edge and bot protection (e.g., WAF, CDN, DDoS mitigation).</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Perform security-focused infrastructure reviews for new product releases and architectural changes.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Implement and maintain monitoring and alerting tools to detect cloud and container-related vulnerabilities and misconfigurations.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Own container image security — vulnerability scanning and remediation at the base image layer, and building the gating needed to keep unpatched or non-compliant images out of production.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Collaborate with Infrastructure and Engineering teams to embed security into CI/CD pipelines and deployment processes without slowing down delivery.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Partner with Application Security and Engineering to implement security controls on opportunities identified during Threat Modeling.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Lead initiatives around infrastructure-as-code (IaC) security and runtime protection to automate security controls and hardening.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Identify security control gaps across cloud, container, and network infrastructure, and drive them to resolution — proposing the fix and staging the implementation (e.g., a Terraform PR) for Infrastructure to review and approve.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Assist with threat modeling, risk assessments, and provide security guidance during the development lifecycle.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Collaborate with incident response teams, offering expert advice on cloud-related security issues to help resolve incidents quickly.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Develop tooling or automation to support proactive remediation and continuous security validation.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Track and report DevSecOps KPIs, such as mean time to remediate, security control coverage, and vulnerability trends.</span></li> <li style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;"><span style="font-family: tahoma, arial, helvetica, sans-serif; font-size: 12pt;">Mentor engineers across the security org and set technical standards fo