Senior DevSecOps Security Engineer

As Senior Engineer, Defense Security, you'll play a critical role in MLB's objective to secure our web and mobile applications used by millions of fans and employees. You'll lead efforts to integrate advanced application and cloud security technologies, focusing on anti-bot, anti-fraud, and other cutting-edge measures to protect our platforms. You'll also ensure security is embedded seamlessly into our development processes by automating security across the CI/CD pipeline and SSDLC, helping us stay ahead of evolving threats.

Responsibilities

We are looking for an experienced DevSecOps integrator who can be our subject matter expert and build practical solutions for our organization.

Application & Cloud Security

• Deploy and manage anti-bot and anti-fraud technologies to protect web and mobile apps
• Analyze traffic patterns to identify suspicious behaviors and help mitigate risks
• Implement advanced application and API security tooling

Development Pipeline Integration

• Collaborate with development and infrastructure teams to integrate security into CI/CD pipelines
• Manage and optimize InfoSec deployment pipelines (e.g., vulnerability management, patching, EDR/HIDS/FIM, DAST/SAST, WAF/RASP/API etc.)
• Automate security testing, compliance checks, and vulnerability scanning, etc.

Collaboration & Education

• Partner with Product and Development teams to conduct threat modeling exercises and teach security best practices
• Promote SSDLC principles, coding standards, and security tooling adoption
• Participate in an on-call rotation to respond to escalated security incidents

Tooling & Innovation

• Evaluate, recommend, and implement new security solutions to improve efficiency and reduce costs
• Drive established proof-of-concept processes and take new security tools from evaluation to production
• Stay current with MITRE ATT&CK tactics and industry trends to proactively address emerging threats

Qualifications & Skills

• Bachelor's or Master of Computer Science, Software Engineering, or Cybersecurity
• 4+ years of experience in Dev(Sec)Ops, software engineering, security engineering or a related role
• Relevant Incident Response, DevSecOps or Cloud Security certifications are a plus
• Proficiency in one or more programming languages such as Java, Node.js, Go, or Python is required
• Experience with APIs (REST, GraphQL) and tools like Postman or Insomnia is required
• Experience with DevOps tools (e.g., K8s, Terraform, GitHub Actions, etc) is required
• Experience with formal SSDLC frameworks (e.g., Agile, BSIMM, OWASP) is a plus
• Ability to execute tasks with high accuracy and thoroughness and maintain confidentiality when dealing with sensitive information
• Strong written and oral communications skills
• Ability to explain technical concepts to audiences at different levels

Salary Range: $150,000 - $185,000 (Base Salary) + Bonus

As a candidate for this position, your salary and related aspects of compensation will be contingent upon your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision. In addition to your salary, MLB believes in providing a competitive compensation and benefits package for its employees.

Top MLB Perks & Benefits:

• Competitive Benefits Package
• Company 401K Contribution
• Paid Time Off and Holidays
• Paid Parental Leave
• Access to Free Tickets to Baseball Games & MLB.TV
• Discounts at MLB Store | MLBShop.com
• Employee Assistance Programs (EAP)
• Onsite/Online Training & Development Programs
• Tuition Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Pet Insurance

Why MLB?

Major League Baseball (MLB) is the most historic of the major professional sports leagues in the United States and Canada. Employees love working at MLB because of the culture of growth, teamwork, and professionalism. Employees who are most successful at MLB take initiative, know how to identify problems and provide solutions, and always put the Team first. For those ready to step up to the plate and join the major leagues, MLB takes the same approach as teams do with their players: empowering our "workforce athletes" to be at their best by engineering experiences that put employees in the best position to succeed. Major League Baseball is looking for candidates who are passionate about growing America's pastime to best serve its fans for decades to come.

California Residents: Please see our California Recruitment Privacy Policy for more details.

Colorado Residents: Colorado based applicants may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.

Applicants requiring a reasonable accommodation for any part of the application and hiring process, please email us at [email protected]. Requests received for non-disability related issues, such as following up on an application, will not receive a response.

Are you ready to Step Up to the Plate? Apply below!