Director, Security

Summary

Join Underdog, the fastest-growing sports gaming company, as the Director of Security. Lead the security team, build and mature security operations, and oversee threat detection and incident response. Partner with engineering, product, and leadership to maintain player trust. Manage a team of security professionals, set the vision for security operations, and guide priorities aligned with company goals. Be the point person during security incidents, driving action and collaboration across teams. Manage team budgets, vendor relationships, and service provider contracts.

Requirements

• 8+ years in cybersecurity leadership, including experience securing large-scale cloud and web applications
• 4+ years managing security teams, including managers and ICs
• Hands-on experience in incident response, SIEM, threat detection, and vulnerability management
• Familiarity with AWS services (CloudTrail, IAM, EC2, S3, RDS, etc.) and modern container orchestration environments (Kubernetes)
• Experience with common corporate security practices (endpoint, SaaS, IAM security)
• Strong communication skills, with the ability to engage both technical and non-technical audiences
• Experience collaborating with executives, legal counsel, and PR teams during security incidents

Responsibilities

• Lead the security team, including managing managers and individual contributors
• Set the vision, build roadmaps, and ensure the team’s priorities align with company objectives
• Oversee threat detection, incident response, vulnerability management, and threat intelligence programs
• Partner with product and engineering teams to ensure security is integrated into the software development lifecycle
• Guide incident management from detection through remediation, including executive and cross-functional communication
• Foster a culture of psychological safety, accountability, and continuous improvement within the security team
• Manage team budgets, vendor relationships, and service provider contracts
• Collaborate with legal, compliance, and privacy teams to assess and mitigate technical, business, and regulatory risks
• Stay current with emerging threats, vulnerabilities, and security best practices

Preferred Qualifications

• Experience with mobile application security at scale
• Familiarity with security automation, IaC tools (Terraform, Helm), and security logging tools (Datadog, Sumo Logic)
• Relevant certifications (CISSP, CISM, or equivalent)
• Experience working with bug bounty programs and vulnerability disclosures

Benefits

• Unlimited PTO (we're extremely flexible with the exception of the first few weeks before & into the NFL season)
• 16 weeks of fully paid parental leave
• A $500 home office allowance
• A connected virtual first culture with a highly engaged distributed workforce
• 5% 401k match, FSA, company paid health, dental, vision plan options for employees and dependents