---
title: 'Security Engineer, Application Security at GameChanger'
canonical: 'https://feeny.ai/job/security-engineer-application-security-gamechanger-united-states-rk46ntfsfaxh'
type: 'job'
last_seen: '2026-09-04'
---

# Security Engineer, Application Security at GameChanger

- **Company:** GameChanger
- **Location:** United States
- **Employment:** full-time
- **Work type:** remote
- **Posted:** 2026-08-18
- **Last confirmed live:** 2026-09-04
- **Apply:** https://jobs.ashbyhq.com/gamechanger/8c2edc2c-6da1-4719-abbf-30fb302fce9f

## Job description

## ABOUT GAMECHANGER:

We believe in the life changing impact youth sports have on and off the field. Sports encourage leadership, teamwork, responsibility, and confidence – important life lessons that have the power to propel our youth toward meaningful futures. We recognize that without coaches, parents, and volunteers, organized youth sports could not exist. By building the first and best place to experience the youth sports moments important to our community, we are helping families elevate the next generation through youth sports.

So if you love sports and their community building potential, or building cool products is your sport, GameChanger is the team for you. We are a remote first, dynamic tech company based in New York City, and we are solving some of the biggest challenges in youth sports today.

## THE POSITION:

We’re looking for a Security Engineer to join our InfoSec team and become the primary security partner for our software engineering organization. Reporting to the Security Engineering Manager, you’ll operate application security across the SDLC, champion secure design and development practices, and bring DevSecOps discipline to how we build and ship software. This is a high-impact, highly collaborative role. You’ll work closely with platform and product engineers to make security a part of how we build and deliver. You will also be a member of our weekly on-call rotation.

## WHAT YOU’LL DO:

Application security

- Embed security into every phase of the SDLC
- Champion security requirements for the responsible and secure integration of Gen AI and agentic AI tools within our product stack
- Conduct security-by-design engagements for new features, APIs, platform initiatives, and infrastructure changes
- Perform secure code reviews providing engineers with clear, actionable findings and remediation guidance
- Partner with architecture and platform teams to establish secure API patterns (REST and GraphQL)
- Contribute to and maintain secure coding guidelines, API security standards, and security architectural patterns that serve as the “paved roads” for all engineering teams
- Give useful code review feedback, write documentation that outlasts the ticket, and run the occasional workshop or lunch-and-learn for engineers

DevSecOps

- Integrate and maintain security tooling across CI/CD pipelines
- Enforce security quality gates in delivery pipelines
- Harden the CI/CD platform components, including configuration and hardening of GitHub Actions and runner environments
- Identify opportunities to leverage AI for increasing engineering productivity and agentic security workflows
- Work alongside DevOps engineers to ensure cloud infrastructure is defined and deployed securely via IaC (terraform, k8s)
- Implement and validate security controls for containerized workloads
- Support the implementation of application-layer network security controls, such as Web Application Firewalls (WAFs) and CDN security, to protect application endpoints

Vulnerability & Risk Management

- Operate the application vulnerability management lifecycle
- Triage and prioritize findings from our sources (including; GHAS, NowSecure, Wiz, BugCrowd, penetration tests) by business impact and exploitability
- Proactively identify systemic risks and facilitate cross-functional initiatives to address root causes
- Track security-specific KPIs (e.g., MTTR, vulnerability density, and security coverage of CI/CD pipelines) and translate them into actionable insights for engineering and business leadership
- Effectively communicate security risk clearly to both engineering and business leaders

## WHAT YOU’LL BRING:

- 3+ years in application security engineering
- Proven experience building and operating internal security developer platforms or tooling that reduces developer friction
- Demonstrated ability to use AI/ML-driven tools to enhance security effectiveness and scalability
- Hands-on experience leading threat modeling engagements and designing paved roads
- Proven track record integrating security tooling into CI/CD pipelines
- Working knowledge of OWASP Top 10s (web, mobile, API, LLM)
- Hands-on experience securing deployments in AWS with container and Kubernetes security, IaC scanning, and policy-as-code approaches
- Demonstrated expertise in security-by-design in TypeScript, Swift, and/or Kotlin
- Track record of implementing secure primitives in mobile ecosystems (iOS/Android)
- Beneficial certifications: AWS Certified Security Specialty, CKS, GWEB, GMOB, or equivalent.

## WHO YOU ARE:

- Pragmatic defender. You understand that security must enable the business, not block it. You look for “secure by default” solutions and know how to make the right path the easy path for engineers.
- Force multiplier. You don’t solve every security problem yourself. You coach, document, and build systems that make the engineers around you more secure by default.
- Clear communicator. You can trace a BOLA vulnerability chain to a frontend engineer and translate the same risk into business terms for a VP; and you know which conversation you’re in.
- Automation-first. If you have to do it twice, you’d rather write the script.
- Long-view oriented. You think about medium-to-long-term system health, not just the current sprint, and you proactively address root causes rather than patching symptoms repeatedly.
- Collaborative and cross-functional. You bring product, business, and operational context into your security decisions, not just security best practices in isolation.
- Approachable. You foster open dialogue, encourage diverse perspectives, and make it easy for engineers to surface security concerns without fear of judgment or friction.

## PERKS:

- Work remotely throughout the US* or from our well-furnished, modern office in Manhattan, NY.
- Unlimited vacation policy.
- Paid volunteer opportunities.
- Technology stipend - $4,000 every 2 years after your start to make sure you have the latest and greatest technology.
- WFH stipend - $500 annually to make your WFH situation comfortable.
- Monthly physical, mental, wellness & learning stipend offered through Holisticly.
- Monthly lifestyle stipend offered through Fringe.
- Full health benefits - medical, dental, vision, prescription, FSA, HRA, HSA, and coverage for family/dependents.
- Retirement savings - Traditional and Roth 401K plans are offered through Vanguard, with an immediate company match.
- Life insurance - basic life, supplemental life, and dependent life.
- Disability leave - short-term disability and long-term disability.
- Company paid parental leave - up to 20 weeks for birthing parents and up to 12 weeks for non-birthing parents.
- Family building benefits offered through Progyny.
- DICK'S Sporting Goods and their family of brands teammate discount.

The target salary range for this position is between $120,000 and $140,000. This is part of a total compensation package that includes incentive, equity, and benefits for eligible roles. Individual pay may vary from the target range and is determined by several factors including experience, internal pay equity, and other relevant business considerations. We constantly review all teammate pay to ensure a great compensation package that is fair and equal across the board.

- DICK'S Sporting Goods has company-wide practices to monitor and protect the company from significant compliance and monetary implications as it pertains to employer state tax liabilities. Due to said guidelines put in place, we are unable to hire in AK, DE, HI, IA, LA, MS, MT, OK, and SC.

We are an equal opportunity employer and value diversity in our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

IMPORTANT NOTICE: All official recruitment communications from GameChanger will come from an email address ending in @gc.com http://gc.com or no-reply@ashby.hq.com. If you receive communication from any other domain, please be cautious, as it is likely fraudulent.

## About GameChanger

## Company Overview
- **One-liner**: GameChanger provides a youth sports platform for live streaming, scorekeeping, team management, and developmental resources, connecting coaches, families, and athletes.
- **Entity Type**: Private (wholly owned by DICK’S Sporting Goods, operates as its own company)
- **Headquarters**: New York City, United States
- **Founded**: 2009
- **Founders**: Not publicly available

## Core Business
- **Primary industry**: Sports technology (SportsTech)
- **Target customers**: B2C (coaches, parents, athletes) and B2B (youth sports organizations)
- **Mission**: “Help families elevate the next generation through sports.”  
- **Vision**: “Be the home of youth sports.”

## Products & Services
- **GameChanger App** (iOS/Android): All-in-one platform for scorekeeping, live streaming, team management (rosters, scheduling, messaging), and post-game highlights & stats. Free for coaches; subscription for families starting at $3.33/month for unlimited viewing of baseball/softball streams.
- **GameChanger Live Streaming**: Integrated live video broadcasting for baseball, softball, basketball, volleyball, soccer, football, lacrosse, hockey, and more.
- **Team Management Tools**: Scheduling, attendance, roster management, and communication features designed for youth sports coaches and staff.

## Market Standing
- **Valuation/Market Cap**: Not disclosed (subsidiary of DICK’S Sporting Goods, a public company with ticker DKS)
- **Key Metric**: Covers nearly 10 million games annually and supports 1 million+ teams (2024).
- **Notable Investors/Partners**: DICK’S Sporting Goods (owner and strategic partner).
- **Growth Signals**: Named “Best Workplace for Innovators 2024” by Fast Company, “Best Employer in Sports 2023,” and “Best Place to Work” 2023 & 2024. Operates across multiple youth sports and continues to expand live streaming capabilities.

## Competitive Advantages
- **First-mover & network effects**: Largest dedicated youth sports app with millions of coaches and families already using the platform, creating a high switching barrier.
- **Deep integration with DICK’S Sporting Goods**: Access to physical retail footprint, brand trust, and cross-promotional opportunities.
- **All-in-one solution**: Combines scoring, streaming, stats, and team management in a single free-to-download app, reducing fragmentation for coaches.

## Strategic Focus
- Continue to “humanize and elevate the youth sports experience” by expanding coverage to more sports, improving live streaming quality, and deepening features for both coaches and families.
- Leverage data and analytics to provide actionable insights for player development.
- Grow the community while maintaining a remote-first, mission-driven culture.

## Why Work Here
- **Remote-first**: Hire across the United States; work from anywhere with a home office stipend and tech stipend.
- **Culture**: Core values – Customer Obsessed, Team Players, Ambitious, Empowered, Focused. Strong emphasis on mission (youth sports impact).
- **Perks & Benefits**: Unlimited vacation, health insurance, 401(k) with match, learning & development stipend, fertility and parental leave, mental health resources.
- **Hiring process**: Transparent and collaborative; includes initial conversation, hiring manager, assessment, and team interviews.
- **Engineering culture**: Ownership-oriented, cross-collaborative teams building scalable tools used by millions.

## Sources
1. [gc.com/careers](https://gc.com/careers) – Benefits, remote policy, values, FAQs
2. [gc.com/about-us](https://www.gc.com/about-us) – Mission, vision, stats, ownership
3. [builtin.com/company/gamechanger](https://builtin.com/company/gamechanger) – Employee count, office, culture
4. [linkedin.com/company/gamechangermedia](https://www.linkedin.com/company/gamechangermedia) – Company description
5. [jobs.ashbyhq.com/gamechanger](https://jobs.ashbyhq.com/gamechanger) – Current job postings

## Other roles at GameChanger

- [Senior Product Designer, New Ventures](https://feeny.ai/job/senior-product-designer-new-ventures-gamechanger-united-states-sypfbcafy1b8) — United States
- [Senior Engineering Manager, Video Enablement](https://feeny.ai/job/senior-engineering-manager-video-enablement-gamechanger-united-states-v3c5je02b3c6) — United States
- [Staff Software Engineer, Video Enablement](https://feeny.ai/job/staff-software-engineer-video-enablement-gamechanger-united-states-qd5py5angdyt) — United States
- [Security Engineer, Application Security](https://feeny.ai/job/security-engineer-application-security-mercor-san-francisco-5z2pbdwzrw0n) — San Francisco, CA
- [Security Engineer, Application Security](https://feeny.ai/job/security-engineer-application-security-sentry-toronto-8g9ebjfvg9k5) — Toronto, Canada
- [Security Engineer, Application Security](https://feeny.ai/job/security-engineer-application-security-sentry-san-francisco-kem9w11bkepd) — San Francisco, CA
- [Security Engineer, Application Security](https://feeny.ai/job/security-engineer-application-security-saronic-technologies-austin-ckkpb3cpjyzr) — Austin, TX
- [Security Engineer, Application Security](https://feeny.ai/job/security-engineer-application-security-figure-san-jose-b2my3t4k45hn) — San Jose, CA
- [Security Engineer, Application Security](https://feeny.ai/job/security-engineer-application-security-openai-new-york-1zwdfkwy7882) — New York, NY
- [Security Engineer, Application Security](https://feeny.ai/job/security-engineer-application-security-openai-seattle-a9a777czhtnp) — Seattle, WA