About the job
Join PrizePicks, the fastest-growing sports company in North America, as recognized by Inc. 5000. We are the leading platform for Daily Fantasy Sports, offering a wide array of sports leagues including the NFL, NBA, and Esports titles such as League of Legends and Counter-Strike. Our diverse team of over 550 employees thrives in an inclusive culture that values individuals regardless of their level of sports fandom. Are you ready to revolutionize the DFS industry with us?
Your Responsibilities:
- Own the Security Pipeline: Enhance and manage application security tools (SAST, SCA, Secrets Detection) within our CI/CD pipelines to ensure developers receive precise, actionable, and prioritized alerts.
- Act as a Security Champion: Serve as the primary security liaison for Engineering and Product teams, integrating security measures from the design phase through deployment.
- Lead Threat Modeling: Facilitate collaborative threat modeling sessions to identify architectural risks prior to coding. Work with penetration testing teams to convert these threats into specific testing scenarios for high-risk functions.
- Support Code-Level Remediation: Guide developers not just by identifying issues but by demonstrating how to rectify them through comprehensive code reviews and offering practical remediation advice.
- Implement Secrets Management: Take the lead in identifying and eliminating hard-coded secrets, guiding the organization towards more secure practices.

