• Build and own the DevSecOps function from the ground up (in the security team), defining strategy, roadmap, priorities, and success metrics; • Assess the current security posture of applications, infrastructure, cloud environments, and development processes; • Design and implement security controls across the software development lifecycle; • Establish and maintain secure CI/CD practices, including security gates and automated validation processes; • Integrate security checks into engineering workflows with a strong focus on automation and developer experience; • Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting; • Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments; • Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection; • Develop Infrastructure-as-Code security standards and policy-as-code controls; • Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response; • Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams; • Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.

• Build and own the DevSecOps function from the ground up (in the security team), defining strategy, roadmap, priorities, and success metrics; • Assess the current security posture of applications, infrastructure, cloud environments, and development processes; • Design and implement security controls across the software development lifecycle; • Establish and maintain secure CI/CD practices, including security gates and automated validation processes; • Integrate security checks into engineering workflows with a strong focus on automation and developer experience; • Build and operate vulnerability management processes, including triage, prioritization, remediation tracking, and reporting; • Define and implement cloud security standards, guardrails, and best practices across AWS, Azure, or GCP environments; • Design and enforce Kubernetes and container security controls, including RBAC, secrets management, network segmentation, and runtime protection; • Develop Infrastructure-as-Code security standards and policy-as-code controls; • Integrate security logs and events into SIEM to support monitoring, threat detection, and incident response; • Create security standards, technical guidelines, and operational procedures for Engineering and Platform teams; • Support security incident investigations related to cloud, infrastructure, CI/CD, application vulnerabilities, exposed credentials, and supply-chain threats.

At DraftKings, AI is becoming an integral part of both our present and future, powering how work gets done today, guiding smarter decisions, and sparking bold ideas. It's transforming how we enhance customer experiences, streamline operations, and unlock new possibilities. Our teams are energized by innovation and readily embrace emerging technology. We're not waiting for the future to arrive. We're shaping it, one bold step at a time. To those who see AI as a driver of progress, come build the future together. The Crown Is Yours As a DKeX Market Ops Specialist, you'll play a key role in scaling the operations that power our prediction markets. You'll take ownership of complex market operations, strengthen operational processes, and help shape how we launch, monitor, and optimize markets in a rapidly evolving regulatory environment. Working across Engineering, Regulatory, Analytics, Product, and external partners, you'll combine operational expertise with data-driven decision-making to improve reliability, support market integrity, and help build a trusted marketplace for our customers. What You'll Do - Own the execution of end-to-end exchange market operations, including market creation, configuration, launch coordination, real-time monitoring, and settlement, while driving operational excellence across the market lifecycle. - Lead complex operational investigations by monitoring trading activity, identifying market anomalies, assessing potential trade practice concerns, and partnering with Regulatory teams to resolve issues in accordance with established procedures. - Analyze market and operational performance to identify trends, recommend improvements, and deliver actionable insights that enhance market quality, operational efficiency, and the customer experience. - Partner with Engineering, Product, Market Structure, and external ecosystem partners to support new market launches, improve operational tooling, and develop scalable processes that enable future growth. - Drive continuous improvement by strengthening operational documentation, refining workflows and controls, supporting regulatory inquiries and audits, and serving as a trusted subject matter expert for market operations. What You'll Bring - At least 2 years of experience in market operations, exchange operations, trading operations, market surveillance, financial markets, sportsbook trading, or a similar operational environment. - A strong understanding of exchange and market structure concepts, including order books, matching engines, liquidity, market states, trading dynamics, and operational risk management. - Proven experience analyzing complex operational issues, identifying process improvements, and driving scalable solutions in a fast-paced, regulated environment. - Strong analytical, communication, and stakeholder management skills, with the ability to influence cross-functional partners and communicate operational insights to both technical and non-technical audiences. - A passion for prediction markets, exchange operations, sports trading, or financial markets, with the flexibility to support shift coverage as needed; experience working in a regulated trading, exchange operations, or market surveillance environment is preferred. * Working shifts based on Bulgarian business hours. #LI-BD1 #LI-HYBRID Join Our Team We're a publicly traded (NASDAQ: DKNG) technology company headquartered in Boston. As a regulated gaming company, you may be required to obtain a gaming license issued by the appropriate state agency as a condition of employment. Don't worry, we'll guide you through the process if this is relevant to your role.

Role Description A DevSecOps Engineer integrates security practices throughout the software development lifecycle within a Scrum framework. This role requires expertise in security automation, compliance monitoring, and Continuous Integration/Continuous Deployment (CI/CD) pipelines to ensure applications meet security standards while maintaining rapid development cycles. The position involves close collaboration with development teams, security officers, and stakeholders to deliver secure, compliant applications through iterative development processes. What you'll do - Security Integration: Implement and maintain security controls throughout the development pipeline, ensuring security is embedded in every phase of the software development lifecycle. - Compliance Management: Collaborate with Information System Security Officers (ISSOs) to review Security Technical Implementation Guides (STIGs) and support Authority to Operate (ATO) processes, ensuring compliance with security standards and regulatory requirements. - CI/CD Pipeline Security: Design, implement, and maintain secure CI/CD pipelines with automated security testing, vulnerability scanning, and compliance checks integrated into deployment workflows. - Scrum Process Participation: Actively participate in Scrum ceremonies, including sprint planning, daily standups, sprint reviews, and retrospectives, while providing security guidance and effort estimates for security-related tasks. - Vulnerability Management: Conduct regular security assessments, vulnerability scans, and penetration testing, while coordinating remediation efforts with development teams. - Infrastructure as Code (IaC): Develop and maintain secure infrastructure configurations using Infrastructure as Code principles with automated security policy enforcement. - Security Monitoring: Implement and manage security monitoring tools, logging systems, and incident response procedures to detect and respond to security threats in real time. - Risk Assessment: Perform security risk assessments, threat modeling, and security architecture reviews to identify and mitigate potential vulnerabilities. - Documentation and Training: Create security documentation, procedures, and training materials while maintaining compliance artifacts for audit purposes. Qualifications - Required: 4 years of experience + Bachelor’s degree, or 8 years of experience - Preferred: DoD Secret clearance or equivalent - IAT Level II certification required (e.g., Security+ CE, CCNA-Security, GSEC, GICSP, SSCP, CySA+, or other DoD 8570.01-M / DoD 8140 approved certifications at IAT Level II) - AWS - Experience specifically with AWS CDK and processes (preferred) - DevSecOps Expertise — Strong experience in DevSecOps practices, security automation, and secure software development within enterprise environments. - Scrum Methodology — Deep understanding of Scrum principles and Agile development practices, including integrating security requirements into sprint planning and user story development. - Security Standards Knowledge — Extensive knowledge of STIGs, NIST frameworks, ATO processes, and federal security compliance requirements, with experience working alongside ISSOs and security teams. Hands-on experience with ATO and STIG maintenance and renewal is preferred. - CI/CD and Automation — Proficiency with CI/CD tools, with GitLab CI preferred, as well as containerization technologies including Docker and Kubernetes, and automation platforms such as Terraform, Ansible, and CloudFormation. - Cloud Security — Experience with cloud security platforms and cloud-native security tools, with AWS Security Hub preferred. Familiarity with multi-cloud security strategies and additional platforms (Azure Security Center, Google Cloud Security) is a plus. - Programming and Scripting — Proficiency in scripting languages, JavaScript (preferred), Bash, and PowerShell, with experience using security testing frameworks and static/dynamic analysis tools. - Security Tools — Experience with vulnerability scanners (Nessus, OpenVAS), SAST/DAST tools, container security scanning solutions, and security orchestration platforms. - Communication and Collaboration — Excellent communication skills with the ability to work effectively across cross-functional Scrum teams, security officers, compliance teams, and stakeholders in fast-paced development environments. Benefits - Salary range for this role is $115,000-125,000 plus annual bonus Company Description Easy Dynamics is an equal opportunity employer. Applicants are considered for positions without discrimination on the basis of race, color, religion, sex, national origin, age, disability, sexual orientation, gender identity, veteran status or any other consideration made unlawful by applicable federal, state, or local laws.