Fanatics is building a leading global digital sports platform. The company ignites the passions of global sports fans and maximizes the presence and reach for hundreds of sports partners globally by offering innovative products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans, a global partner network with over 900 sports properties, including major national and international professional sports leagues, teams, players associations, athletes, celebrities, colleges, and college conferences, and over 2,000 retail locations, including its Lids retail business stores. 

 

As a market leader with more than 18,000 employees, and hundreds of partners, suppliers, and vendors worldwide, we take responsibility for driving toward more ethical and sustainable practices. We are committed to building an inclusive Fanatics community, reflecting and representing society at every level of the business, including our employees, vendors, partners and fans. Fanatics is also dedicated to making a positive impact in the communities where we all live, work, and play through strategic philanthropic initiatives.

 

Fanatics is searching for an experienced application security specialist to help protect Fanatics-developed applications which are used externally and internally. A successful candidate will display strong communication and technical skills and be comfortable and effective working independently and as part of a larger, highly distributed team.

We're looking specifically for folks who place an emphasis on usable security and scaling successfully through automation. Fanatics is a fast-growing company, and our security program needs to be able to keep pace with that growth while not disrupting innovation. 

Responsible for continually improving product security by partnering with developers in all phases of software development life cycle.  Work with teams to ensure security standards are maintained on the design and implementation of applications and systems in cloud and on-premises environments.  

·         A minimum of 3 years of experience.  

 

RESPONSIBILITIES: 

 

·         Establish security best processes and practices for our mobile, on-premises and cloud-based platforms.

·         Provide expert knowledge and guidance to the product teams about security vulnerabilities and remediation controls.

·         Support and consult with product and development teams in the area of application security, including threat modeling and Application Security reviews.

·         Implement, continuously develop, and maintain secure Software Security Development Lifecycle processes and software maturity model.

·         Perform threat modeling, secure design, and source code review.

·         Conduct security assessments, security testing and validation of vulnerability scan results.

·         Assist teams in reproducing, triaging, and addressing application security vulnerabilities.

·         Incorporate security tools/tasks to automate product development and deployment.

·         Develop, implement, and automate defensive controls, creating and tuning tools and rules to detect and address malicious activity. Responsible for integration of security controls into SDLC.

·         Establish supply chain security process and ensure 3rd party software meet the standards.

Facilitate injection, integration, and compliance for Static Application Security Testing (SAST), Container Security Scanning & Open-Source Security Analysis during development phase.

Facilitate injection, integration, and compliance for Dynamic Application Security Testing (DAST)

Contribute to triaging, addressing security issues and tracking remediation.

Own and manage Secure SDLC tooling.

Develop and customize security tools used by security teams and developers.

Work closely with development teams to build security directly into their SDLCs.

Provide remediation guidance to programmers and management.

Support bug bounty program

Support the preparation of security releases

·         Mentor and train development teams on secure coding standards and techniques. Develop Secure Coding Program.

·         Constantly innovate at the pace of the adversary using latest techniques. 

 

 

EDUCATIONAL REQUIREMENTS: 

·         Bachelor’s degree in computer science, Information Systems, or equivalent combination of education and experience  

·         Certifications in the field of Information Security (at least one of the following: CISSP, CEH, GIAC CPEN, OSCP, OSWE, CWAPT, GWAPT, GWEB)

 

·         Your career growth, your ideas, your work-life balance, and your well-being.

·         Diversity and Inclusion

·         Our Company Culture and Values

·         Providing outstanding Company Perks and Benefits

 

Fanatics is committed to responsible planning and purchasing (RPP) practices, working with its business partners across its global and multi-layered supply chain, to ensure that planning, sourcing, and purchasing decisions, along with other supporting processes, do not impede or conflict with the fulfillment of Fanatics’ fair labor practices.

NOTICE TO CALIFORNIA RESIDENTS/APPLICANTS: In connection with your application, we collect information that identifies, reasonably relates to or describes you (“Personal Information”). The categories of Personal Information that we collect include your name, government issued identification number(s), email address, mailing address, other contact information, emergency contact information, employment history, educational history, criminal record, and demographic information.  We collect and use those categories of Personal Information about you for human resources and other business management purposes, including identifying and evaluating you as a candidate for potential or future employment or future contract positions, recordkeeping in relation to recruiting and hiring, conducting criminal background checks as permitted by law, conducting analytics, and ensuring compliance with applicable legal requirements and Company policies. For additional information on how we collect and use personal information in connection with your job application, review our Candidate Privacy Policy-CA