Senior DevSecOps Security Engineer

As Senior Engineer, Defense Security, you’ll play a critical role in MLB’s objective to secure our web and mobile applications used by millions of fans and employees. You’ll lead efforts to integrate advanced application and cloud security technologies, focusing on anti-bot, anti-fraud, and other cutting-edge measures to protect our platforms. You’ll also ensure security is embedded seamlessly into our development processes by automating security across the CI/CD pipeline and SSDLC, helping us stay ahead of evolving threats.

Responsibilities 

We are looking for an experienced DevSecOps integrator who can be our subject matter expert and build practical solutions for our organization.

Application & Cloud Security

• Deploy and manage anti-bot and anti-fraud technologies to protect web and mobile apps
• Analyze traffic patterns to identify suspicious behaviors and help mitigate risks
• Implement advanced application and API security tooling

Development Pipeline Integration

• Collaborate with development and infrastructure teams to integrate security into CI/CD pipelines
• Manage and optimize InfoSec deployment pipelines (e.g., vulnerability management, patching, EDR/HIDS/FIM, DAST/SAST, WAF/RASP/API etc.)
• Automate security testing, compliance checks, and vulnerability scanning, etc.

Collaboration & Education

• Partner with Product and Development teams to conduct threat modeling exercises and teach security best practices
• Promote SSDLC principles, coding standards, and security tooling adoption
• Participate in an on-call rotation to respond to escalated security incidents

Tooling & Innovation

• Evaluate, recommend, and implement new security solutions to improve efficiency and reduce costs
• Drive established proof-of-concept processes and take new security tools from evaluation to production
• Stay current with MITRE ATT&CK tactics and industry trends to proactively address emerging threats

Qualifications & Skills

• Bachelor’s or Master of Computer Science, Software Engineering, or Cybersecurity
• 4+ years of experience in Dev(Sec)Ops, software engineering, security engineering or a related role
• Relevant Incident Response, DevSecOps or Cloud Security certifications are a plus
• Proficiency in one or more programming languages such as Java, Node.js, Go, or Python is required
• Experience with APIs (REST, GraphQL) and tools like Postman or Insomnia is required
• Experience with DevOps tools (e.g., K8s, Terraform, GitHub Actions, etc) is required
• Experience with formal SSDLC frameworks (e.g., Agile, BSIMM, OWASP) is a plus
• Ability to execute tasks with high accuracy and thoroughness and maintain confidentiality when dealing with sensitive information
• Strong written and oral communications skills
• Ability to explain technical concepts to audiences at different levels

Salary Range: $150,000 - $185,000 (Base Salary) + Bonus 

As a candidate for this position, your salary and related aspects of compensation will be contingent upon your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision. In addition to your salary, MLB believes in providing a competitive compensation and benefits package for its employees.

Top MLB Perks & Benefits:

• Competitive Benefits Package
• Company 401K Contribution
• Paid Time Off and Holidays
• Paid Parental Leave
• Access to Free Tickets to Baseball Games & MLB.TV
• Discounts at MLB Store | MLBShop.com
• Employee Assistance Programs (EAP)
• Onsite/Online Training & Development Programs
• Tuition Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Pet Insurance