<p>Location: Remote - USA</p><br/><p>Employment Type: Salaried</p><br/><p>Team: Security & Compliance</p><br/><div>Fanatics is a leading global digital sports platform, complete with offerings that excite fans and maximize the reach and presence for partners across the entire sports ecosystem. Come help us build a company the world has never seen before!&nbsp;We are first and foremost a technology company.&nbsp;We build innovative fan experiences through highly analytical, forward thinking, and open-minded collaboration. We are passionate about evaluating and finding the right tech for the jobs at hand, and we get excited about building solutions for modern challenges. </div><div><br></div><div>Fanatics is searching for a Senior Information Security Engineer with significant experience in network, system, and cloud security.&nbsp; This position will be responsible for advising teams on the proper design and implementation of applications and systems in cloud and on-premise environments. This role will also assess design and implementation proposals, evaluate application and system vulnerabilities, monitor environments for security violations, mentor the Security Operations Center team on incident management and digital forensics, and contribute to the selection and implementation of security tools and processes.</div><div>&nbsp;</div><div>Our team members are given a great deal of autonomy in the pursuit of keeping Fanatics secure and a successful candidate will demonstrate strong communication skills and is expected to be comfortable and effective working independently and as part of a larger, highly distributed team. We're looking specifically for folks who place an emphasis on usable security. Fanatics is a fast-growing company and our security program needs to be able to keep pace with that growth while not disrupting innovation.</div><h3>Responsibilities</h3><br/><ul><li>Identify and communicate current and emerging security threats</li><li>Design and implementation of enterprise-class security solutions to protect Fanatics and our customers</li><li>Create solutions that balance business needs with company-specific and industry-related requirements and regulations.</li><li>Identifying security-related deficiencies in existing and proposed architectures</li><li>Regularly triage cyber security incidents post-enrichment and respond to events as part of the incident response process</li><li>Consult with teams throughout the company around the implementation of security best practices</li><li>Mentoring team members across the security, networking, and system groups with regards to security architecture and fundamental security concepts.</li></ul><br/><h3>Desired Experience, Skills, and Knowledge</h3><br/><ul><li>A minimum 8 years in Information Technology and 5 years of Information Security experience.</li><li>A minimum of 3 years supporting a technically diverse Cardholder Data Environment (CDE) environment.</li><li>Demonstrated expertise in Cloud and Infrastructure security</li><li>Expertise with automating and reviewing infrastructure as code</li><li>Demonstrated ability to consult with teams across the organization regarding the integration of security requirements best practices into their workflows and services</li><li>Demonstrated experience in developing enterprise-level security solutions and taking ownership of the implementation of those solutions</li><li>Experience conducting vulnerability scans in on-premise and cloud environments, and managing the tracking and remediation of findings.</li><li>Advanced networking skills, including experience with WAN, Wireless, Firewall, VPN, Proxy and Intrusion Prevention technologies</li><li>Experience with scripting automation using Python &amp; Bash. PowerShell and/or Go experience is a plus</li><li>Experience with security assessment tools for on-premise and cloud environments including vulnerability scanners, encryption and key management software and hardware, logging and alerting systems.</li><li>Ability to present findings and summaries of issues to senior management</li><li>Designing secure architectures in accordance with relevant regulatory controls (PCI-DSS, SOC 2, ISO-27001/2, etc.)</li><li>Implementing security solutions in a forward-thinking and user-focused manner. This includes delivering iterative improvements in consultation with the larger Information Security team and other operational support teams</li><li>Enterprise-level 24x7 operational support experience</li><li>Knowledge of web service development and deployment, with a specific focus on microservice-based architectures</li><li>Identity and access management (IAM) concepts and the ability to scale those concepts to an enterprise level.</li></ul><br/><div><b>Things We Care About</b></div><div><br></div><div>·<span style="font-size: 7pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>Your career growth, your ideas, your work-life balance, and your well-being.</div><div>·<span style="font-size: 7pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>Diversity and Inclusion</div><div>·<span style="font-size: 7pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>Our Company <a href="https://www.fanaticsinc.com/culture" class="postings-link">Culture and Values</a></div><div>·<span style="font-size: 7pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>Providing outstanding <a href="https://www.fanaticsinc.com/perks-and-benefits" class="postings-link">Company Perks and Benefits</a></div><div><br></div><div><b>Company Overview</b></div><div>&nbsp;</div><div>Fanatics is building a leading global digital sports platform to ignite and harness the passions of fans and maximize the presence and reach for hundreds of partners globally. Optimizing these long-standing partnerships, a database of more than 80 million global consumers and a trusted, recognizable brand name, Fanatics is expanding beyond its position as a global leader for licensed sports merchandise to now becoming a next-gen digital sports platform, featuring an array of offerings for fans across the sports ecosystem.</div><div>&nbsp;</div><div>The Fanatics family of companies currently includes Fanatics Commerce, a vertically-integrated licensed merchandise business that has changed the way fans purchase their favorite team apparel, jerseys, headwear and hardgoods through a tech-infused approach to making and quickly distributing fan gear in today’s 24/7 mobile-first economy; Candy Digital, a digital collectibles company that is partnering with prominent sports properties, including MLB and MLBPA, to build an official NFT ecosystem; Fanatics Collectibles, through Topps as a cornerstone of the business, building a new model for the collectibles and trading cards hobby with top leagues and players association partners; and Fanatics Betting &amp; Gaming, a mobile betting, gaming and retail sportsbook platform. Fanatics’ partners include all major professional sports leagues (NFL, MLB, NBA, NHL, NASCAR, MLS, PGA) and hundreds of collegiate and professional teams, which include several of the biggest global soccer clubs.</div><div>&nbsp;</div><div>As a market leader with more than 9,000 employees, and hundreds of partners, suppliers, and vendors worldwide, we take responsibility for driving toward more ethical and sustainable practices. We are committed to building an inclusive Fanatics community, reflecting and representing society at every level of the business, including our employees, vendors, partners and fans. Fanatics is also dedicated to making a positive impact in the communities where we all live, work, and play through strategic philanthropic initiatives.</div><div>&nbsp;</div><div>At Fanatics, we’re a diverse, passionate group of employees aiming to ignite pride and passion in the fans we outfit, celebrate and support.&nbsp; We recognize that diversity helps drive and foster innovation, and through our IDEA program (inclusion, diversity, equality and advocacy) at Fanatics we provide employees with tools and resources to feel connected and engaged in who they are and what they do to support the ultimate fan experience.</div><div><br></div><div><a href="http://www.fanaticsinc.com/" style="font-size: 12pt" class="postings-link">www.fanaticsinc.com</a></div><div>&nbsp;</div><div><u>Ensure your Fanatics job offer is legitimate and don’t fall victim to fraud.&nbsp; Fanatics never seeks payment from job applicants.&nbsp; Fanatics recruiters will only reach out to applicants from an @fanatics.com or @fanatics.co.uk email address.&nbsp; For added security, where possible, apply through our company website at <a href="http://www.fanaticsinc.com/careers" class="postings-link">www.fanaticsinc.com/careers</a></u></div><div><br></div><div>Fanatics is committed to responsible planning and purchasing (RPP) practices, working with its business partners across its global and multi-layered supply chain, to ensure that planning, sourcing, and purchasing decisions, along with other supporting processes, do not impede or conflict with the fulfillment of Fanatics’ fair labor practices.</div><div><br></div><div><b>NOTICE TO CALIFORNIA RESIDENTS/APPLICANTS</b>: In connection with your application, we collect information that identifies, reasonably relates to or describes you (“Personal Information”). The categories of Personal Information that we collect include your name, government issued identification number(s), email address, mailing address, other contact information, emergency contact information, employment history, educational history, criminal record, and demographic information.<i>&nbsp;</i>&nbsp;We collect and use those categories of Personal Information about you for human resources and other business management purposes, including identifying and evaluating you as a candidate for potential or future employment or future contract positions, recordkeeping in relation to recruiting and hiring, conducting criminal background checks as permitted by law, conducting analytics, and ensuring compliance with applicable legal requirements and Company policies.</div>

Location: Remote - USA

  

Employment Type: Salaried

  

Team: Security & Compliance

  

Fanatics is a leading global digital sports platform, complete with offerings
that excite fans and maximize the reach and presence for partners across the
entire sports ecosystem. Come help us build a company the world has never seen
before! We are first and foremost a technology company. We build innovative
fan experiences through highly analytical, forward thinking, and open-minded
collaboration. We are passionate about evaluating and finding the right tech
for the jobs at hand, and we get excited about building solutions for modern
challenges.

  

Fanatics is searching for a Senior Information Security Engineer with
significant experience in network, system, and cloud security.  This position
will be responsible for advising teams on the proper design and implementation
of applications and systems in cloud and on-premise environments. This role
will also assess design and implementation proposals, evaluate application and
system vulnerabilities, monitor environments for security violations, mentor
the Security Operations Center team on incident management and digital
forensics, and contribute to the selection and implementation of security
tools and processes.



Our team members are given a great deal of autonomy in the pursuit of keeping
Fanatics secure and a successful candidate will demonstrate strong
communication skills and is expected to be comfortable and effective working
independently and as part of a larger, highly distributed team. We're looking
specifically for folks who place an emphasis on usable security. Fanatics is a
fast-growing company and our security program needs to be able to keep pace
with that growth while not disrupting innovation.

### Responsibilities

  

  * Identify and communicate current and emerging security threats
  * Design and implementation of enterprise-class security solutions to protect Fanatics and our customers
  * Create solutions that balance business needs with company-specific and industry-related requirements and regulations.
  * Identifying security-related deficiencies in existing and proposed architectures
  * Regularly triage cyber security incidents post-enrichment and respond to events as part of the incident response process
  * Consult with teams throughout the company around the implementation of security best practices
  * Mentoring team members across the security, networking, and system groups with regards to security architecture and fundamental security concepts.

  

### Desired Experience, Skills, and Knowledge

  

  * A minimum 8 years in Information Technology and 5 years of Information Security experience.
  * A minimum of 3 years supporting a technically diverse Cardholder Data Environment (CDE) environment.
  * Demonstrated expertise in Cloud and Infrastructure security
  * Expertise with automating and reviewing infrastructure as code
  * Demonstrated ability to consult with teams across the organization regarding the integration of security requirements best practices into their workflows and services
  * Demonstrated experience in developing enterprise-level security solutions and taking ownership of the implementation of those solutions
  * Experience conducting vulnerability scans in on-premise and cloud environments, and managing the tracking and remediation of findings.
  * Advanced networking skills, including experience with WAN, Wireless, Firewall, VPN, Proxy and Intrusion Prevention technologies
  * Experience with scripting automation using Python & Bash. PowerShell and/or Go experience is a plus
  * Experience with security assessment tools for on-premise and cloud environments including vulnerability scanners, encryption and key management software and hardware, logging and alerting systems.
  * Ability to present findings and summaries of issues to senior management
  * Designing secure architectures in accordance with relevant regulatory controls (PCI-DSS, SOC 2, ISO-27001/2, etc.)
  * Implementing security solutions in a forward-thinking and user-focused manner. This includes delivering iterative improvements in consultation with the larger Information Security team and other operational support teams
  * Enterprise-level 24x7 operational support experience
  * Knowledge of web service development and deployment, with a specific focus on microservice-based architectures
  * Identity and access management (IAM) concepts and the ability to scale those concepts to an enterprise level.

  

 **Things We Care About**

  

·         Your career growth, your ideas, your work-life balance, and your
well-being.

·         Diversity and Inclusion

·         Our Company [Culture and
Values](https://www.fanaticsinc.com/culture)

·         Providing outstanding [Company Perks and
Benefits](https://www.fanaticsinc.com/perks-and-benefits)

  

 **Company Overview**



Fanatics is building a leading global digital sports platform to ignite and
harness the passions of fans and maximize the presence and reach for hundreds
of partners globally. Optimizing these long-standing partnerships, a database
of more than 80 million global consumers and a trusted, recognizable brand
name, Fanatics is expanding beyond its position as a global leader for
licensed sports merchandise to now becoming a next-gen digital sports
platform, featuring an array of offerings for fans across the sports
ecosystem.



The Fanatics family of companies currently includes Fanatics Commerce, a
vertically-integrated licensed merchandise business that has changed the way
fans purchase their favorite team apparel, jerseys, headwear and hardgoods
through a tech-infused approach to making and quickly distributing fan gear in
today’s 24/7 mobile-first economy; Candy Digital, a digital collectibles
company that is partnering with prominent sports properties, including MLB and
MLBPA, to build an official NFT ecosystem; Fanatics Collectibles, through
Topps as a cornerstone of the business, building a new model for the
collectibles and trading cards hobby with top leagues and players association
partners; and Fanatics Betting & Gaming, a mobile betting, gaming and retail
sportsbook platform. Fanatics’ partners include all major professional sports
leagues (NFL, MLB, NBA, NHL, NASCAR, MLS, PGA) and hundreds of collegiate and
professional teams, which include several of the biggest global soccer clubs.



As a market leader with more than 9,000 employees, and hundreds of partners,
suppliers, and vendors worldwide, we take responsibility for driving toward
more ethical and sustainable practices. We are committed to building an
inclusive Fanatics community, reflecting and representing society at every
level of the business, including our employees, vendors, partners and fans.
Fanatics is also dedicated to making a positive impact in the communities
where we all live, work, and play through strategic philanthropic initiatives.



At Fanatics, we’re a diverse, passionate group of employees aiming to ignite
pride and passion in the fans we outfit, celebrate and support.  We recognize
that diversity helps drive and foster innovation, and through our IDEA program
(inclusion, diversity, equality and advocacy) at Fanatics we provide employees
with tools and resources to feel connected and engaged in who they are and
what they do to support the ultimate fan experience.

  

[www.fanaticsinc.com](http://www.fanaticsinc.com/)



 _Ensure your Fanatics job offer is legitimate and don’t fall victim to fraud.
Fanatics never seeks payment from job applicants.  Fanatics recruiters will
only reach out to applicants from an @fanatics.com or @fanatics.co.uk email
address.  For added security, where possible, apply through our company
website at [www.fanaticsinc.com/careers](http://www.fanaticsinc.com/careers)_

  

Fanatics is committed to responsible planning and purchasing (RPP) practices,
working with its business partners across its global and multi-layered supply
chain, to ensure that planning, sourcing, and purchasing decisions, along with
other supporting processes, do not impede or conflict with the fulfillment of
Fanatics’ fair labor practices.

  

 **NOTICE TO CALIFORNIA RESIDENTS/APPLICANTS** : In connection with your
application, we collect information that identifies, reasonably relates to or
describes you (“Personal Information”). The categories of Personal Information
that we collect include your name, government issued identification number(s),
email address, mailing address, other contact information, emergency contact
information, employment history, educational history, criminal record, and
demographic information. _ _  We collect and use those categories of Personal
Information about you for human resources and other business management
purposes, including identifying and evaluating you as a candidate for
potential or future employment or future contract positions, recordkeeping in
relation to recruiting and hiring, conducting criminal background checks as
permitted by law, conducting analytics, and ensuring compliance with
applicable legal requirements and Company policies.

