Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 6 days ago

Senior Security Engineer, Detection & Response (SOC)

PrizePicks31 open roles

Pay
$160,000 – $175,000 a year
Where
Atlanta, GA preferred, Remote
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security Engineer, Detection & Response (SOC)PrizePicks · Atlanta, GA preferred, Remote

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on PrizePicks's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. PrizePicks postings stay open a median of 40 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 6 days ago

PrizePicks median: 40 days open

The posting

At PrizePicks, we are the fastest-growing sports company in North America, as recognized by Inc. 5000. As the leading platform for Daily Fantasy Sports, we cover a diverse range of sports leagues, including the NFL, NBA, and Esports titles like League of Legends and Counter-Strike. Our team of over 550 employees thrives in an inclusive culture that values individuals from diverse backgrounds, regardless of their level of sports fandom. Ready to reimagine the DFS industry together?

We're maturing Information Security's detection, incident response, and forensics capabilities, and we're looking for a seasoned SOC engineer to help lead that effort alongside the existing team. This is a hands-on role spanning monitoring, triage, response, and forensics, with real ownership over how the program evolves from here.

What you'll do:

  • Own Detection & Monitoring: Own how we monitor and triage events and alerts ingested into the SIEM, working with the team to tune detection content, reduce false positives, and close coverage gaps.
  • Build the Playbooks: Lead the design and continuous improvement of incident response playbooks, so response is consistent and repeatable across the team, even when you're not the one running it.
  • Threat Hunt: Lead our threat hunting practice, proactively hunting for malicious or anomalous activity that alerting and automated detection don't catch.
  • Mature Forensics Capability: Strengthen our digital forensics capability, including the processes and tooling that support investigations and evidence handling.
  • Automate the Response: Drive automation for alerting, enrichment, and triage across the team's workflows to cut manual toil and reduce time to respond.
  • Respond to Incidents: React to and lead response on incidents as they fire, coordinating across business partners as needed.
  • Document and Learn: Document incidents, root cause, and remediation with clarity and rigor.
  • Own Post-Incident Reviews: Build a structured, blameless post-incident review process, with real root-cause analysis, action items tracked to closure, and follow-through that goes beyond a debrief call.
  • Mature the Program: Shape how the program measures itself and scales, evolving IR metrics, escalation paths, and priorities over time.

What you'll have:

  • Experience building or significantly maturing a SOC/IR function, as opposed to operating one that's already fully staffed. You've helped take a program from early-stage to production-ready.
  • 5+ years in a SOC, incident response, or detection engineering role, with demonstrated ownership of an IR or monitoring program, outside of queue work.
  • Strong grasp of the full incident response lifecycle: preparation, detection, containment, eradication, recovery, and lessons learned.
  • Hands-on SIEM experience: log ingestion, correlation rules, detection tuning. Specific platform is flexible.
  • Experience with forensic analysis and evidence handling across host and cloud environments.
  • Comfort building automation/scripting for triage and response (Python or similar).
  • Working knowledge of cloud environments (AWS/GCP/Azure) and common attacker TTPs (MITRE ATT&CK).
  • Ability to define risk in both technical and business-relevant terms.
  • Clear written communication: this role produces the playbooks and incident documentation the rest of the team relies on.

Technical must haves:

  • SIEM tooling: log correlation, alert tuning, content development (platform-agnostic).
  • Digital forensics fundamentals: host, network, and/or cloud evidence collection and analysis.
  • Scripting/automation ability (Python or similar) for triage and response workflows.
  • Working knowledge of at least one major cloud provider (AWS, GCP, or Azure).
  • Familiarity with MITRE ATT&CK and common threat actor TTPs.

What makes you stand out:

  • Relevant certifications (GCIH, GCFA, GCIA, OSCP, or equivalent).
  • SOAR platform experience.
  • Prior experience in fintech, gaming, or another high-fraud-risk industry.
  • Experience running detection and IR in a distributed/remote workforce, leaning on endpoint and identity signals rather than a centralized network perimeter.

Where you’ll live:

  • While we prefer candidates based in Atlanta, we are open to qualified applicants from anywhere in the U.S. and are willing to consider remote candidates. #LI-Remote

Working at PrizePicks:

The typical salary range for this position is $160,000 to $175,000. At PrizePicks, we consider your role, level, and where you'll be working when determining our salary ranges. The compensation info you see on our job postings gives you an idea of the starting pay range for the position. Your actual pay within that range will depend on your specific work location, as well as your skills, experience, and education. Your recruiter will be happy to chat more about the specific pay range for your location and how we arrived at it during the hiring process.

This application period will remain open for 30 days. We’re committed to finding the best candidate, so this date may be adjusted, and any changes will be reflected in this posting.

Date Posted: 10/28/2026

Benefits you’ll receive:

In addition to your great compensation package, full-time employees will be eligible for the following perks:

  • Company-subsidized medical, dental, & vision plans
  • 401(k) plan with company match
  • Annual bonus
  • Flexible PTO to encourage a healthy work/life balance (2 weeks STRONGLY encouraged!)
  • Generous paid leave programs, including 16-week paid parental leave and disability benefits
  • Workplace flexibility and modern work schedules focused on getting the job done, not hours clocked
  • Company-wide in-person events and team outings
  • Lifestyle enhancement program
  • Company equipment provided (Windows & Mac options)
  • Annual performance reviews with opportunities for growth and career development

You must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

PrizePicks is an Equal Opportunity Employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against PrizePicks's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on PrizePicks's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    PrizePicks's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.