Staff Platform Engineer

ABOUT FANDUEL

FanDuel Group is the premier mobile gaming company in the United States and Canada. FanDuel Group consists of a portfolio of leading brands across mobile wagering including: America’s #1 Sportsbook, FanDuel Sportsbook; its leading iGaming platform, FanDuel Casino; the industry’s unquestioned leader in horse racing and advance-deposit wagering, FanDuel Racing; and its daily fantasy sports product.  

In addition, FanDuel Group operates FanDuel TV, its broadly distributed linear cable television network and FanDuel TV+, its leading direct-to-consumer OTT platform. FanDuel Group has a presence across all 50 states, Canada, and Puerto Rico.

The company is based in New York with US offices in Los Angeles, Atlanta, and Jersey City, as well as global offices in Canada and Scotland. The company’s affiliates have offices worldwide, including in Ireland, Portugal, Romania, and Australia.

FanDuel Group is a subsidiary of Flutter Entertainment, the world's largest sports betting and gaming operator with a portfolio of globally recognized brands and traded on the New York Stock Exchange (NYSE: FLUT).

THE POSITION
Our roster has an opening with your name on it

We are looking for a skilled and accomplished Staff Platform Engineer to join our Platform Engineering department. In this immersive role, you will report directly into our Cloud Management team and will be responsible for executing a comprehensive Cloud Security strategy, mentoring and advising diverse teams across the organization, and implementing secure by default principles across FanDuel. This role offers an excellent opportunity for you to apply your expertise across our platform, ensuring the protection and integrity of our infrastructure. 

In addition to the specific responsibilities outlined above, employees may be required to perform other such duties as assigned by the Company. This ensures operational flexibility and allows the Company to meet evolving business needs.

THE GAME PLAN
Everyone on our team has a part to play

• Drive security-by-design principles in platform development. 

• Act as a subject matter expert on public cloud security and cloud native security within Platform Engineering. 

• Facilitate and bridge communication between Platform Engineering and Security teams. 

• Ensure security requirements are considered early in development cycles. 

• Develop and deploy security capabilities in CI/CD pipelines. 

• Identify opportunities for implementing fundamental security controls within the platform architecture. 

• Perform security reviews of platform changes and new features and recommend risk mitigation strategies. 

• Work closely with development and operations teams to define and enforce cloud application security standards and best practices. 

• Provide expertise in public cloud security for initiatives related to detection & response, vulnerability management, and compliance. 

• Provide regular security status reports to Platform Engineering and Security teams. 

• Track progress on efforts to reduce security debt and introduce additional security coverage improvements. 

• Take on additional responsibilities as needed to maintain and improve platform security across the organization
  
  
  

THE STATS
What we're looking for in our next teammate

• Expertise in cloud architecture and design, including the ability to design highly secure and scalable cloud environments. 

• Excellent communication skills to advocate for security best practices, influence key stakeholders, and convey complex security concepts to non-technical audiences. 

• Can proactively identify security risks and potential solutions, and advocate for their prioritization within the security department’s roadmap.  

• Awareness of cloud security trends and a commitment to staying informed about emerging threats and evolving technologies. Can articulate the risk to FanDuel of security findings in a way that developers and operations can understand and relate to.  

• Expertise with Amazon Web Services (AWS) and a general understanding of other major cloud providers. 

• Expertise with AWS Security tooling such as IAM Access Analyzer, SCP/RCP/DCPs, GuardDuty and Macie. 

• Strong familiarity with Cloud Native technologies, including containers and Kubernetes.  

• Ability to collaborate with various teams and departments on projects with a focus on short to mid-term goals. 

• Track record of working effectively with diverse perspectives and incentives to achieve consensus among teams. 

• Experience with IAM Identify Center, IAM Access Reviews, Network Security (WAF, VPC Management, TGW), KMS Encryption, EC2 Image Hardening, CSPM tooling, Rego Policies, CNAP / CIEM / SIEM. 

• Strong knowledge of Security Frameworks such as CIS and NIST. 

• Good verbal and written communication skills. 
  
  
  

PLAYER BENEFITS
We treat our team right

FanDuel is an equal opportunities employer and we believe, as one of our principles states, “We are One Team!”. As such, we are committed to equal employment opportunity regardless of race, color, ethnicity, ancestry, religion, creed, sex, national origin, sexual orientation, age, citizenship status, marital status, disability, gender identity, gender expression, veteran status, or any other characteristic protected by state, local or federal law. We believe FanDuel is strongest and best able to compete if all employees feel valued, respected, and included.

The applicable salary range for this position is $158,000 - $198,000 USD, which is dependent on a variety of factors including relevant experience, location, business needs and market demand. This role may offer the following benefits: medical, vision, and dental insurance; life insurance; disability insurance; a 401(k) matching program; among other employee benefits. This role may also be eligible for short-term or long-term incentive compensation, including, but not limited to, cash bonuses and stock program participation. This role includes paid personal time off and 14 paid company holidays. FanDuel offers paid sick time in accordance with all applicable state and federal laws.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

#LI-Hybrid