Staff Detection & Response Engineer

Fanatics Commerce is the global leader in licensed sports merchandise, operating a vertically integrated platform that designs, manufactures, and delivers officially licensed apparel, jerseys, headwear, and collectibles for major leagues, teams, and events worldwide. With more than 900 e-commerce sites and a global omnichannel presence across digital, in-venue, and retail, Fanatics Commerce reaches fans in over 180 countries and powers official fan experiences for many of the world's most iconic sports properties. At Fanatics, we bring our BOLD Leadership Principles to life every day - building championship teams, obsessing over fans, acting with entrepreneurial speed, and delivering with a determined and relentless mindset. **ROLE OVERVIEW** Fanatics is seeking an experienced Staff Security Engineer to join our Detection and Response team, bringing hands-on expertise in incident response, detection engineering, and SOAR development to help scale our security operations. The ideal candidate combines a defensive practitioner's mindset with deep knowledge of adversarial TTPs, driving continuous improvement across detections, automated workflows, and cross-team security partnerships. The Staff Security Engineer, Detection & Response delivers business and fan impact through BOLD leadership and execution excellence, leveraging data, automation, and AI-enabled insights. **HOW WILL YOU DRIVE IMPACT** Success is measured by the ability to deliver results through BOLD capabilities and measurable outcomes. Team & Leadership Impact (Build Championship Teams) Provide technical input and direction on detection and response projects, including tasking, reviewing peer engineers' work, and mentoring team members to elevate the team's overall capability. Partner with leadership and peers to gather requirements, priorities, and enhancement requests, translating them into data, tooling, and integration requirements that align with organizational goals. Collaborate closely with engineering teams across the organization to continuously define use cases and requirements for enabling technologies including SIEM, SOAR, EDR, Intrusion Detection Systems, Secure Web Gateway, DNS security, System Hardening, Identity Management, and PKI. Fan & Customer Impact (Obsessed with Fans) Respond to security incidents and conduct thorough investigations, clearly articulating potential risks and remediation strategies to stakeholders at all levels to protect the platform and the fan experience. Apply a usable security philosophy — ensuring that security controls and processes protect Fanatics' fans and data without disrupting the pace of innovation that drives the business. Participate in an on-call rotation, monitoring the real-world performance of detections and automated workflows to ensure continuous coverage and rapid response. Communicate findings, risks, and recommendations with exceptional clarity to both technical and non-technical stakeholders across internal and external audiences. Innovation & Problem Solving (Limitless Entrepreneurial Spirit) Design, develop, test, and continuously optimize detection rules and SOAR workflows using engineering best practices, enabling faster anomaly identification and more consistent incident response at scale. Conduct proactive threat hunts and threat modeling exercises, drawing on attacker TTP insights to identify potential indicators of compromise and translate findings into actionable security controls. Evaluate and operationalize AI-assisted security tooling to expand detection coverage, increase response speed, and scale the team's capabilities as Fanatics continues to grow. Leverage detection-as-code methodologies and CI/CD tools (e.g. GitLab, GitHub) to manage and evolve the detection library in a disciplined, repeatable, and auditable manner. Ownership & Execution (Determined & Relentless Mindset) Own the full lifecycle of detections, automated response workflows, playbooks, integrations, and scripts — including authoring and maintaining thorough documentation for each. Contribute to process and technology improvement after each incident, ensuring the team learns, adapts, and raises its baseline after every event. Analyze endpoint, network, and application logs for anomalous activity at enterprise scale, applying strong data analysis and correlation skills to surface meaningful signals from noise. Operate effectively as an independent contributor within a highly distributed, multi-region SOC environment, demonstrating strong organizational skills, meticulous attention to detail, and the ability to prioritize work in a fast-paced, rapidly changing setting. AI & DIGITAL CAPABILITY We are building a future-ready organization. This role is expected to: Apply AI and technology to improve efficiency, quality, and outcomes Use data and digital tools to inform decisions and enhance performance Demonstrate curiosity and adaptability in adopting new technologies and ways of working Contribute to a culture of innovation and continuous improvement **CAPABILITIES & EXPERIENCE YOU BRING** **Required Qualifications:** 8+ years of experience in technical information security roles with a focus on security monitoring, threat detection, and incident response, including hands-on incident response experience managing complex investigations with multiple stakeholders. Advanced experience with enterprise SIEM platforms, including the design and development of detections, reports, and dashboards, combined with strong SOAR development skills and proven experience automating security response workflows at enterprise scale. Deep working knowledge of adversary TTPs and demonstrated experience applying MITRE ATT&CK principles to detect and respond to security incidents, including use of penetration testing and ATT&CK framework tools to simulate adversarial behaviors. Strong conceptual knowledge of OS internals and malware functionality — including persistence mechanisms — sufficient to author endpoint detections directly from raw telemetry. Proficiency with scripting, REST APIs, query languages, and CI/CD tools (e.g. GitLab, GitHub) for automation, alert enrichment, detection development, and detection-as-code workflows. Experience evaluating and operating AI-assisted security tooling, and familiarity with working in hybrid environments that include both on-premise and cloud-based systems. Exceptional communication, analytical, and problem-solving skills, with the ability to objectively evaluate security risk and operate with a high degree of autonomy within a distributed, multi-region team. *At Fanatics, we operate with a BOLD mindset - We Build Championship Teams, we’re Obsessed with Fans, we embrace a Limitless Entrepreneurial Spirit, and we approach every challenge with a Determined and Relentless Mindset. If you’re ready to contribute to a dynamic, fast-paced environment that thrives on collaboration and growth, we want you to be part of our team.* ***ABOUT US*** *Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.* ***ABOUT THE TEAM*** *Fanatics Commerce is a leading designer, manufacturer, and seller of licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods. It operates a vertically-integrated platform of digital and physical capabilities for leading sports leagues, teams, colleges, and associations globally – as well as its flagship site, [](http://www.fanatics.com).* *Fanatics Commerce has a broad range of online, sports venue, and vertical apparel partnerships worldwide, including comprehensive partnerships with leading leagues, teams, colleges, and sports organizations across the world—including the NFL, NBA, MLB, NHL, MLS, Formula 1, and Australian Football League (AFL); the Dallas Cowboys, Golden State Warriors, Paris Saint-Germain, Chelsea FC, and Tokyo Giants; the University of Notre Dame, University of Alabama, and University of Texas; the International Olympic Committee (IOC), England Rugby, and the Union of European Football Associations (UEFA).* *At Fanatics Commerce, we infuse our BOLD Leadership Principles in everything we do:* *· Build Championship Teams* *· Obsessed with Fans* *· Limitless Entrepreneurial Spirit* *· Determined and Relentless Mindset* *By submitting your application, you agree to our terms of service and acknowledge you have read our [Candidate Privacy Policy.](https://static1.squarespace.com/static/5ff494b9931735466ce28d5b/t/69de53bde2c02c25e9c38758/1776178110037/Candidate+Privacy+Policy+April+2026.pdf)* *Fanatics will never ask candidates for money, banking information, or other sensitive personal information as part of the interview process. If you receive a suspicious message claiming to be from Fanatics recruiting, please do not respond and report it* [*here*](mailto:recruiting-fraud@fanaticsinc.com)*.*