Job description

About Fubo: FuboTV Inc. is a consumer-first live TV streaming company that is defining the future of TV. Ranked among Fast Company’s Most Innovative Companies (2026) and the Financial Times’ The Americas’ Fastest-Growing Companies (2026, 2025), FuboTV owns Hulu + Live TV (entertainment), Fubo (sports) and Molotov (entertainment and sports), which stream in markets around the globe. Our Mission: Our mission is to deliver premium sports, news and entertainment programming through a best-in-class user experience that offers greater choice, flexibility and value. About the Role: *This role is a New York City based HYBRID position. Candidates must be located in NYC, and willing to come into the office on a hybrid basis, three times a week (Tuesday, Wednesday, Thursday).* We are seeking a Senior Security Engineer with deep expertise in Zero Trust Networking concepts and proven experience implementing Zero Trust architectures across enterprise environments. The ideal candidate will possess strong hands-on experience securing remote access, endpoint security, BYOD environments, identity federation, authentication systems, and privileged access management. This role requires a highly motivated security engineer who can contribute to Zero Trust initiatives across planning, execution, and governance while driving projects with urgency and accountability. The successful candidate will work cross-functionally with Infrastructure, Cloud, IAM, IT, and Security Operations teams to modernize enterprise security controls and reduce organizational risk. Responsibilities: Zero Trust Architecture & Governance Design, implement, and govern comprehensive Zero Trust architecture across enterprise cloud, hybrid, and on-premises environments Lead enterprise initiatives to modernize legacy perimeter-based security models using Zero Trust principles and secure remote access technologies Develop and maintain cybersecurity policies, standards, and governance frameworks aligned with evolving Zero Trust security requirements Partner with cross-functional teams to drive planning, execution, and operationalization of Zero Trust initiatives Audit cloud, VPN, and on-premises systems to ensure secure configuration and adherence to Zero Trust standards Identity, Authentication & Access Security Review and enhance identity provider (IdP) configurations, federation services, and authentication workflows to protect against sophisticated attacks Implement and manage secure authentication and federation technologies including SAML2, OAuth2, and OpenID Connect Design and support least-privilege access models and Privileged Access Management (PAM) solutions for critical systems and administrative accounts Collaborate with IAM teams to strengthen access governance and identity lifecycle management Endpoint Security & Device Management Oversee enterprise endpoint security posture across corporate and BYOD environments Partner with IT teams to define and enforce required endpoint configurations, software patch levels, and compliance standards Implement and support Mobile Device Management (MDM) solutions and device compliance policies Drive initiatives around endpoint protection, device trust, and continuous posture validation Cloud & Infrastructure Security Secure enterprise workloads and identity configurations across AWS and Google Cloud Platform (GCP) environments Implement cloud-native security controls and IAM best practices across multi-cloud environments Assist with secret management, API security, and secure service-to-service authentication practices Support secure connectivity strategies for remote users, cloud workloads, and enterprise applications Incident Response & Security Operations Participate in incident response planning, investigations, and remediation efforts Support monitoring and detection initiatives through SIEM and endpoint telemetry integrations Assist in identifying and mitigating security gaps related to identity compromise, lateral movement, and unauthorized access Required Qualifications: 7+ years of experience in Security Engineering, Network Security, or Infrastructure Security roles Demonstrated experience implementing Zero Trust architectures across enterprise environments Strong expertise in: Secure remote access technologies Endpoint security and BYOD security models Identity federation and authentication protocols (SAML2, OAuth2, OIDC) Privileged Access Management (PAM) Cloud security and IAM Zero Trust architecture and governance Hands-on experience with: Okta and Identity Provider (IdP) integrations SentinelOne Endpoint Security AWS IAM Google Cloud Platform IAM VPN and secure access technologies Experience developing and updating security standards, policies, and operational procedures Strong project ownership skills with the ability to execute initiatives with urgency and follow-through Excellent communication, analytical, and cross-functional collaboration skills Nice to Have: Experience with: Wiz Security SIEM platforms JAMF Mobile Device Management (MDM) platforms ZTNA, SASE, or Software Defined Perimeter technologies Industry certifications such as: CISSP CCSP AWS Security Specialty GIAC certifications Preferred Characteristics: Strong balance of strategic thinking and hands-on technical execution Ability to lead initiatives independently in fast-paced environments Experience collaborating across Security, IT, Infrastructure, and Engineering teams. Strong understanding of modern attack methods targeting identity, endpoints, and remote access infrastructure Perks & Benefits: At Fubo, you will have the opportunity to personally influence what live media looks like after it goes through its next big transformation Fubo provides a highly competitive compensation based on experience and market standards Robust benefit package including Health/Dental/Vision coverage 401k, Life Insurance, and commuter benefits Free Premium Fubo Account Unlimited PTO days and regular company-wide activities Fubo's main headquarters are located in Midtown Manhattan, with offices in Paris, and Bangalore Fubo is an e-verified company Fubo’s minimum base salary for this role if hired in New York City is $160,000 per year; maximum base salary for this role is $200,000 per year. Additionally, this role is eligible to participate in Fubo's equity plan, annual cash bonus plans, unlimited PTO, and a full range of medical benefits. The final offer amount will be at the company’s sole discretion and determined by multiple factors, including years and depth of experience and expertise, and other business considerations.

Requirements

Must-haves

Zero Trust Architecture & Governance
Design, implement, and govern comprehensive Zero Trust architecture across enterprise cloud, hybrid, and on-premises environments
Lead enterprise initiatives to modernize legacy perimeter-based security models using Zero Trust principles and secure remote access technologies
Develop and maintain cybersecurity policies, standards, and governance frameworks aligned with evolving Zero Trust security requirements
Partner with cross-functional teams to drive planning, execution, and operationalization of Zero Trust initiatives
Audit cloud, VPN, and on-premises systems to ensure secure configuration and adherence to Zero Trust standards
Identity, Authentication & Access Security
Review and enhance identity provider (IdP) configurations, federation services, and authentication workflows to protect against sophisticated attacks
Implement and manage secure authentication and federation technologies including SAML2, OAuth2, and OpenID Connect
Design and support least-privilege access models and Privileged Access Management (PAM) solutions for critical systems and administrative accounts
Collaborate with IAM teams to strengthen access governance and identity lifecycle management
Endpoint Security & Device Management
Oversee enterprise endpoint security posture across corporate and BYOD environments
Partner with IT teams to define and enforce required endpoint configurations, software patch levels, and compliance standards
Implement and support Mobile Device Management (MDM) solutions and device compliance policies
Drive initiatives around endpoint protection, device trust, and continuous posture validation
Cloud & Infrastructure Security
Secure enterprise workloads and identity configurations across AWS and Google Cloud Platform (GCP) environments
Implement cloud-native security controls and IAM best practices across multi-cloud environments
Assist with secret management, API security, and secure service-to-service authentication practices
Support secure connectivity strategies for remote users, cloud workloads, and enterprise applications
Incident Response & Security Operations
Participate in incident response planning, investigations, and remediation efforts
Support monitoring and detection initiatives through SIEM and endpoint telemetry integrations

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsgcpapi

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto