SeniorSecurityEngineer

As a Senior Security Engineer, Development Security & Operations, you will help build the security engineering layer behind MLB’s application delivery and cloud infrastructure. The work spans applications, APIs, cloud platforms, infrastructure-as-code, CI/CD pipelines, and the Agentic SDLC. You will write automation, integrate security tools, and turn security requirements into controls that engineering teams can use in their normal delivery workflows. The role is focused on reducing preventable security issues, improving how findings are detected and routed, and cutting down repetitive remediation work across revenue-critical applications and fan-facing systems. Responsibilities We are looking for a hands-on security engineer who can write code, integrate tools, automate workflows, and turn security requirements into implemented solutions. The person in this role should be comfortable using AI-assisted workflows to make security review, prioritization, remediation, and operations faster and more reliable, while keeping engineering ownership, approval, and auditability intact. Application & Account Security Support anti-bot, anti-fraud, account-abuse, and application-abuse prevention through application telemetry integration, automation, and coordination with edge/platform teams Build and deploy application and API security controls as code, including HAProxy configuration, WAF and bot-management rules, rate limits, routing controls, and related edge/platform security policy through version-controlled IaC and CI/CD workflows CI/CD Security & Software Supply Chain Collaborate with development and infrastructure teams to integrate security into CI/CD pipelines Build and improve security controls across CI/CD pipelines, source code platforms, artifact repositories, and deployment workflows Integrate security testing such as code scanning, secrets scanning, dependency scanning, container scanning, and infrastructure-as-code scanning into developer workflows Help define