Senior Manager, Defensive Security

Join to apply for the Senior Manager, Defensive Security role at Major League Baseball (MLB) Join to apply for the Senior Manager, Defensive Security role at Major League Baseball (MLB) Get AI-powered advice on this job and more exclusive features. As the Senior Manager of Defensive Security, you will be instrumental in Major League Baseballs effort to embed security into our product design and software delivery lifecycle. Youll lead the integration of anti-bot, anti-fraud, API, and application security tooling, and automate security controls across our CI/CD pipelinesensuring our web and mobile platforms remain resilient and trusted by millions of fans and employees alike. Your work will defend the leagues digital assets from emerging threats, ensuring every pitch, stream, and stat is delivered securely to fans around the world. You will also define MLBs next-generation defensive strategy, including security for agentic AI, MCP infrastructure, and autonomous system-to-system interactions. Responsibilities Security Engineering & Automation Design and implement scalable defensive security controls within CI/CD pipelines, infrastructure-as-code, and cloud-native environments Lead integration of anti-bot, anti-fraud, API security, and application security tools across MLB's digital platforms Improve our security architecture by partnering with DevOps, SRE, Product & Software Engineering teams to embed security early in the software development lifecycle (Shift Left) Threat Defense & Incident Readiness Oversee detection engineering efforts to improve visibility, reduce dwell time, and create actionable security alerts and response automations Partner with the Security Operations and Offensive Security teams to mature incident response playbooks, adversary emulation, and purple team exercises Evaluate threats, vulnerabilities, and attack techniques to ensure proactive defense postures (MITRE ATT&CK, D3FEND-aligned) Take part in the on-call rotation for high-severity incident escalations, particularly during high-profile events such as major game days, ticket launches, or partner broadcasts Vulnerability & Exposure Management Lead vulnerability management activities, ensuring timely identification, triage, and remediation of security findings across infrastructure, applications, and APIs Collaborate with product, IT, and infrastructure teams to prioritize risk-based remediation efforts and report on exposure trends Pilot and integrate agentic AI platforms capable of real-time contextual decision-making (e.g., alert triage, threat hunting, VRM automation) to reduce mean time to respond (MTTR) and analyst fatigue Secure Architecture & Application Hardening Develop and enforce secure design patterns for web, mobile, and API platforms, emphasizing resiliency against modern attack vectors Partner with developers and product teams to conduct architectural threat modeling and review high-impact features or deployments Champion best practices in authentication, session management, data protection, and secure SDLC Define and enforce cloud security architecture standards across AWS, Azure, and GCP, incorporating best practices for workload isolation, IAM, encryption, and control plane monitoring Leadership & Collaboration Mentor and develop a growing team of defensive security engineers and analysts; foster a high-performance, innovation-focused culture Track and report key performance indicators (KPIs) and defensive maturity metrics to security leadership and executive stakeholders Serve as a key security stakeholder across Engineering, IT, Product, Legal, and third-party vendors Develop and maintain operational security playbooks, peer-review standards, and change-control procedures. Act as the primary Defensive Security stakeholder in security governance, risk assessments, and change-advisory board processes Qualifications & Skills Bachelors or Master of Computer Science, Software Engineering, or Cybersecurity 4+ years of experience in Dev(Sec)Ops, software engineering, security engineering or a related role Relevant certifications from recognized organizations such as (ISC), GIAC (SANS), CompTIA, OffSec, ISACA, Security Blue Team, or cloud providers (AWS, Azure, GCP) are a strong plus Experience implementing and managing security tooling in one or more areas: WAF, bot mitigation, RASP, EDR, SIEM, CSPM, SAST/DAST, or API security platforms is required Proficiency in one or more languages such as Python, Go, or Bash for automating security controls and CI/CD workflows is required. Experience with formal SSDLC frameworks (e.g., OWASP SAMM) is a plus Experience securing backend APIs (REST, GraphQL, MCP) developed in languages like Node.js, Java, Python or Go is a plus Deep understanding of modern application architectures (cloud-native, microservices, APIs) and their security implications is required Solid experience with DevOps platforms and IaC (Kubernetes, Terraform, GitHub Actions, etc.) is a plus Capable of independently driving mission-critical initiatives to completion with accuracy and care, exercising sound judgment and discretion in the handling of sensitive or confidential information Strong written and oral communications skills. Ability to explain technical concepts to audiences at different levels Salary Range: $140,000- $175,000 (Base Salary) + Bonus As a candidate for this position, your salary and related elements of compensation will be contingent upon your work experience, education, skills and any other factors Major League Baseball (MLB) considers relevant to the hiring decision. In addition to your salary, MLB believes in providing a competitive compensation and benefits package for its employees. Top MLB Perks & Benefits 100% Employer Paid Medical/Dental/Vision Premiums Company Contributed 401K Plan Paid Time Off and Holidays Paid Parental Leave Access to Free Tickets to Baseball Games & MLB.TV Discounts at MLB Store | MLBShop.com Employee Assistance Programs (EAP) Onsite/Online Training & Development Programs Tuition Reimbursement Disability Benefits (short term and long term) Life and Accidental Death Insurance Pet Insurance Why MLB? Major League Baseball (MLB) is the most historic of the major professional sports leagues in the United States and Canada. Employees love working at MLB because of the culture of growth, teamwork, and professionalism. Employees who are most successful at MLB take initiative, know how to identify problems and provide solutions, and always put the Team first. For those ready to step up to the plate and join the major leagues, MLB takes the same approach as teams do with their players: empowering our workforce athletes to be at their best by engineering experiences that put employees in the best position to succeed. Major League Baseball is looking for candidates who are passionate about growing Americas pastime to best serve its fans for decades to come. MLB is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. California Residents: Please see our California Recruitment Privacy Policy for more details. Colorado Residents: Colorado based applicants may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Applicants requiring a reasonable accommodation for any part of the application and hiring process, please email us at accommodations@mlb.com. Requests received for non-disability related issues, such as following up on an application, will not receive a response. Are you ready to Step Up to the Plate? Apply below Seniority level Seniority level Mid-Senior level Employment type Employment type Full-time Job function Job function Other, Information Technology, and Management Referrals increase your chances of interviewing at Major League Baseball (MLB) by 2x Sign in to set job alerts for Senior Security Manager roles. New York, NY $245,000.00-$275,000.00 5 days ago New York, NY $115,000.00-$125,000.00 2 weeks ago New York, NY $125,000.00-$140,000.00 2 weeks ago New York, NY $200,000.00-$230,000.00 4 weeks ago New York City Metropolitan Area 1 day ago Enterprise Security Senior Manager (Technology BISO org) New York, NY $184,000.00-$276,100.00 2 weeks ago New York, NY $255,000.00-$290,000.00 5 days ago New York, NY $236,000.00-$265,499.00 6 days ago New York, NY $130,000.00-$150,000.00 3 months ago Director of Security & Operation, Rising Up Mens Shelter New York, NY $70,000.00-$75,000.00 2 months ago Security Operations Center Manager - New York NY New York, NY $240,000.00-$432,000.00 1 week ago New York, NY $186,300.00-$269,075.00 2 weeks ago Corporate Vice President - Head of Crisis and Incident Management Director, Security Operations and Surveillance Assistant Manager, Security & Safety (Day) New York, NY $64,500.00-$66,500.00 1 week ago Manager, Security Incident Response Operations New York, NY $140,100.00-$226,600.00 2 weeks ago Bronx, NY $85,000.00-$90,000.00 1 week ago Director, IAM Security Operations Leader Jersey City, NJ $155,000.00-$205,000.00 1 week ago Assistant Manager, Security & Safety (Evening) New York, NY $64,500.00-$66,500.00 1 week ago Senior Manager of Cybersecurity Detection Engineering North Hills, NY $173,900.00-$289,800.00 3 weeks ago Valley Stream, NY $84,000.00-$108,000.00 2 weeks ago Head of the Web Security and Segmentation Technologies Senior Property Manager - Stealth NYC HQ Senior Network Security Engineering Manager (Cloud experience required) Roseland, NJ $126,800.00-$339,660.00 5 days ago Senior Director, Identity Governance and Administration (IGA) Roseland, NJ $126,800.00-$339,660.00 4 days ago Senior Technical Program Manager, Audible Information Security and Security Engineering Newark, NJ $133,900.00-$231,400.00 1 week ago Were unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr