security engineer

This role is a New York City based HYBRID position. Candidates must be located in NYC, and willing to come into the office on a hybrid basis, three times a week (Tuesday, Wednesday, Thursday)., This role requires a highly motivated security engineer who can contribute to Zero Trust initiatives across planning, execution, and governance while driving projects with urgency and accountability. The successful candidate will work cross-functionally with Infrastructure, Cloud, IAM, IT, and Security Operations teams to modernize enterprise security controls and reduce organizational risk., Zero Trust Architecture & Governance

• Design, implement, and govern comprehensive Zero Trust architecture across enterprise cloud, hybrid, and on-premises environments
• Lead enterprise initiatives to modernize legacy perimeter-based security models using Zero Trust principles and secure remote access technologies
• Develop and maintain cybersecurity policies, standards, and governance frameworks aligned with evolving Zero Trust security requirements
• Partner with cross-functional teams to drive planning, execution, and operationalization of Zero Trust initiatives
• Audit cloud, VPN, and on-premises systems to ensure secure configuration and adherence to Zero Trust standards

Identity, Authentication & Access Security

• Review and enhance identity provider (IdP) configurations, federation services, and authentication workflows to protect against sophisticated attacks
• Implement and manage secure authentication and federation technologies including SAML2, OAuth2, and OpenID Connect
• Design and support least-privilege access models and Privileged Access Management (PAM) solutions for critical systems and administrative accounts
• Collaborate with IAM teams to strengthen access governance and identity lifecycle management

Endpoint Security & Device Management

• Oversee enterprise endpoint security posture across corporate and BYOD environments
• Partner with IT teams to define and enforce required endpoint configurations, software patch levels, and compliance standards
• Implement and support Mobile Device Management (MDM) solutions and device compliance policies
• Drive initiatives around endpoint protection, device trust, and continuous posture validation

Cloud & Infrastructure Security

• Secure enterprise workloads and identity configurations across AWS and Google Cloud Platform (GCP) environments
• Implement cloud-native security controls and IAM best practices across multi-cloud environments
• Assist with secret management, API security, and secure service-to-service authentication practices
• Support secure connectivity strategies for remote users, cloud workloads, and enterprise applications

Incident Response & Security Operations

• Participate in incident response planning, investigations, and remediation efforts
• Support monitoring and detection initiatives through SIEM and endpoint telemetry integrations
• Assist in identifying and mitigating security gaps related to identity compromise, lateral movement, and unauthorized access

We are seeking a Senior Security Engineer with deep expertise in Zero Trust Networking concepts and proven experience implementing Zero Trust architectures across enterprise environments. The ideal candidate will possess strong hands-on experience securing remote access, endpoint security, BYOD environments, identity federation, authentication systems, and privileged access management., * 7+ years of experience in Security Engineering, Network Security, or Infrastructure Security roles

• Demonstrated experience implementing Zero Trust architectures across enterprise environments

• Strong expertise in:

• Secure remote access technologies
• Endpoint security and BYOD security models
• Identity federation and authentication protocols (SAML2, OAuth2, OIDC)
• Privileged Access Management (PAM)
• Cloud security and IAM
• Zero Trust architecture and governance

Hands-on experience with:

• Okta and Identity Provider (IdP) integrations
• SentinelOne Endpoint Security
• AWS IAM
• Google Cloud Platform IAM
• VPN and secure access technologies

Experience developing and updating security standards, policies, and operational procedures

Strong project ownership skills with the ability to execute initiatives with urgency and follow-through

Excellent communication, analytical, and cross-functional collaboration skills

Nice to Have:

• Experience with:

• Wiz Security
• SIEM platforms
• JAMF
• Mobile Device Management (MDM) platforms
• ZTNA, SASE, or Software Defined Perimeter technologies

Industry certifications such as:

• CISSP
• CCSP
• AWS Security Specialty
• GIAC certifications

Preferred Characteristics:

• Strong balance of strategic thinking and hands-on technical execution
• Ability to lead initiatives independently in fast-paced environments
• Experience collaborating across Security, IT, Infrastructure, and Engineering teams.
• Strong understanding of modern attack methods targeting identity, endpoints, and remote access infrastructure

• Fubo provides a highly competitive compensation based on experience and market standards
• Robust benefit package including Health/Dental/Vision coverage 401k, Life Insurance, and commuter benefits
• Free Premium Fubo Account
• Unlimited PTO days and regular company-wide activities
• Fubo’s main headquarters are located in Midtown Manhattan, with offices in Paris, and Bangalore
• Fubo is an e-verified company

Fubo’s minimum base salary for this role if hired in New York City is $160,000 per year; maximum base salary for this role is $200,000 per year. Additionally, this role is eligible to participate in Fubo’s equity plan, annual cash bonus plans, unlimited PTO, and a full range of medical benefits. The final offer amount will be at the company’s sole discretion and determined by multiple factors, including years and depth of experience and expertise, and other business considerations.

Ranked among Fast Company’s Most Innovative Companies (2026) and the Financial Times’ The Americas’ Fastest-Growing Companies (2026, 2025), FuboTV owns Hulu + Live TV (entertainment), Fubo (sports) and Molotov (entertainment and sports), which stream in markets around the globe.