Security Engineer, Application Security

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GameChanger

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2016

⚽ Sports

☁️ SaaS

📱 Media

Sports • SaaS • Media

GameChanger is a sports technology company that provides a comprehensive app for live video streaming, scorekeeping, and team management for various sports including baseball, softball, basketball, football, volleyball, soccer, and lacrosse. The platform offers advanced scorekeeping features, in-app messaging, lineup sharing, and live streaming capabilities, making it a robust tool for coaches and fans alike. With its GameChanger Film Room and Streaming Kits, the company allows family and fans to never miss a moment of the action by following games in real-time from anywhere. GameChanger is a part of the DICK'S Sporting Goods family and partners with major sports organizations to enhance youth sports experiences. The app also features a content hub for company news and feature releases, and it promotes ease of use for coaches, players, and fans through its user-friendly interface and detailed insights.

📋 Description

• Serve as the primary security partner for the software engineering organization • Operate application security across the SDLC • Champion secure design and development practices and DevSecOps discipline • Define security requirements for responsible and secure integration of Gen AI and agentic AI tools • Conduct security-by-design engagements for features, APIs, platform initiatives, and infrastructure changes • Perform secure code reviews and provide actionable findings and remediation guidance • Establish secure REST and GraphQL API patterns with architecture and platform teams • Maintain secure coding guidelines, API security standards, and security architectural patterns • Write documentation and run engineering workshops or lunch-and-learns • Integrate and maintain security tooling across CI/CD pipelines • Enforce security quality gates and harden GitHub Actions and runner environments • Identify AI opportunities for engineering productivity and agentic security workflows • Partner with DevOps to secure AWS infrastructure through Terraform, Kubernetes, and IaC • Implement and validate controls for containerized workloads • Support WAF and CDN security controls protecting application endpoints • Operate the application vulnerability management lifecycle • Triage and prioritize findings from GHAS, NowSecure, Wiz, BugCrowd, and penetration tests • Identify systemic risks and facilitate cross-functional root-cause initiatives • Track security KPIs including MTTR, vulnerability density, and CI/CD security coverage • Communicate security risks to engineering and business leaders • Participate in the weekly on-call rotation • Report to the Security Engineering Manager

🎯 Requirements

• 3+ years in application security engineering • Experience building and operating internal security developer platforms or tooling that reduces developer friction • Ability to use AI/ML-driven tools to enhance security effectiveness and scalability • Experience leading threat modeling engagements and designing paved roads • Experience integrating security tooling into CI/CD pipelines • Working knowledge of OWASP Top 10s for web, mobile, API, and LLM • Hands-on experience securing AWS deployments with container and Kubernetes security, IaC scanning, and policy-as-code approaches • Expertise in security-by-design in TypeScript, Swift, and/or Kotlin • Track record implementing secure primitives in iOS/Android ecosystems • Beneficial certifications: AWS Certified Security Specialty, CKS, GWEB, GMOB, or equivalent • Must be based in the United States, excluding AK, DE, HI, IA, LA, MS, MT, OK, and SC • Must be legally authorized to work in the United States • Must be 18 years of age or older

🏖️ Benefits

• Work remotely throughout the US or from the modern office in Manhattan, NY • Unlimited vacation policy • Paid volunteer opportunities • Technology stipend — $4,000 every 2 years • WFH stipend — $500 annually • Monthly physical, mental, wellness & learning stipend through Holisticly • Monthly lifestyle stipend through Fringe • Full health benefits: medical, dental, vision, prescription, FSA, HRA, HSA, and family/dependent coverage • Traditional and Roth 401K plans through Vanguard, with immediate company match • Basic, supplemental, and dependent life insurance • Short-term and long-term disability • Company-paid parental leave — up to 20 weeks for birthing parents and up to 12 weeks for non-birthing parents • Family building benefits through Progyny • DICK'S Sporting Goods and family-of-brands teammate discount • Incentive and equity included in the total compensation package for eligible roles