Senior Security Engineer, Detection & Response (SOC)

About this role

At PrizePicks, we are the fastest-growing sports company in North America, as recognized by Inc. 5000. As the leading platform for Daily Fantasy Sports, we cover a diverse range of sports leagues, including the NFL, NBA, and Esports titles like League of Legends and Counter-Strike. Our team of over 550 employees thrives in an inclusive culture that values individuals from diverse backgrounds, regardless of their level of sports fandom.

Ready to reimagine the DFS industry together? We're maturing Information Security's detection, incident response, and forensics capabilities, and we're looking for a seasoned SOC engineer to help lead that effort alongside the existing team. This is a hands-on role spanning monitoring, triage, response, and forensics, with real ownership over how the program evolves from here. What you'll do: Own Detection & Monitoring: Own how we monitor and triage events and alerts ingested into the SIEM, working with the team to tune detection content, reduce false positives, and close coverage gaps.

Build the Playbooks: Lead the design and continuous improvement of incident response playbooks, so response is consistent and repeatable across the team, even when you're not the one running it. Threat Hunt: Lead our threat hunting practice, proactively hunting for malicious or anomalous activity that alerting and automated detection don't catch. Mature Forensics Capability: Strengthen our digital forensics capability, including the processes and tooling that support investigations and evidence handling.

Automate the Response: Drive automation for alerting, enrichment, and triage across the team's workflows to cut manual toil and reduce time to respond. Respond to Incidents: React to and lead response on incidents as they fire, coordinating across business partners as needed. Document and Learn: Document incidents, root cause, and remediation with clarity and rigor. Own Post-Incident Reviews: Build a structured, blameless post-incident review process, with real root-cause analysis, action items tracked to closure, and follow-through that goes beyond a debrief call.