Major League Baseball

Build and automate security engineering for application delivery and cloud infrastructure focusing on CI/CD and AI-assisted workflows. | Bachelor's degree in Computer Science or Cybersecurity with 4+ years in DevSecOps or security engineering and proficiency in Python, Go, or Java plus GCP, Kubernetes, and Terraform experience. | As a Senior Security Engineer, Development Security & Operations, you will help build the security engineering layer behind MLB’s application delivery and cloud infrastructure. The work spans applications, APIs, cloud platforms, infrastructure-as-code, CI/CD pipelines, and the Agentic SDLC. You will write automation, integrate security tools, and turn security requirements into controls that engineering teams can use in their normal delivery workflows. The role is focused on reducing preventable security issues, improving how findings are detected and routed, and cutting down repetitive remediation work across revenue-critical applications and fan-facing systems. Responsibilities We are looking for a hands-on security engineer who can write code, integrate tools, automate workflows, and turn security requirements into implemented solutions. The person in this role should be comfortable using AI-assisted workflows to make security review, prioritization, remediation, and operations faster and more reliable, while keeping engineering ownership, approval, and auditability intact. Application & Account Security Support anti-bot, anti-fraud, account-abuse, and application-abuse prevention through application telemetry integration, automation, and coordination with edge/platform teams Build and deploy application and API security controls as code, including HAProxy configuration, WAF and bot-management rules, rate limits, routing controls, and related edge/platform security policy through version-controlled IaC and CI/CD workflows CI/CD Security & Software Supply Chain Collaborate with development and infrastructure teams to integrate security into CI/CD pipelines Build and improve security controls across CI/CD pipelines, source code platforms, artifact repositories, and deployment workflows Integrate security testing such as code scanning, secrets scanning, dependency scanning, container scanning, and infrastructure-as-code scanning into developer workflows Help define findings severity levels, ownership, exception handling, and remediation routing models Partner with engineering and security teams to reduce remediation noise and improve secure delivery practices Infrastructure and Cloud Platform Security Guardrails Build policy-as-code and security guardrails for cloud, infrastructure-as-code, Kubernetes, and platform delivery workflows Help prevent common risks such as public exposure, overly permissive access, weak logging, insecure storage, missing encryption, and unsafe secrets handling Create reusable security patterns, remediation guidance, and developer-friendly feedback for infrastructure and platform teams Partner with cloud and platform teams to improve baseline security across prioritized environments AI-Assisted Security Engineering and Innovation Identify practical opportunities to use AI-assisted workflows across security review, remediation, prioritization, and operational analysis Evaluate and integrate AI-enabled development and security tools where they improve quality, speed, or consistency Build governed AI-assisted workflows that preserve human approval, auditability, secure data handling, and engineering ownership Help define responsible AI usage patterns for DevSecOps and security engineering workflows Collaboration and Operational Support Partner with Product, Development, Cloud Platform, and Security teams to embed security earlier in engineering workflows Drive adoption of secure engineering practices through practical guidance, reusable patterns, and developer-friendly tooling Support threat modeling and security reviews, and provide practical guidance for prioritized applications and platforms Participate in an on-call rotation to respond to escalated security issues and high-risk operational events Qualifications & Skills Bachelor’s or Master’s degree in Computer Science, Software Engineering, Cybersecurity, or equivalent practical experience 4+ years of experience in DevSecOps, software engineering, security engineering, cloud security, infrastructure security, or a related role Proficiency in one or more programming languages such as Java, Go, Python, or similar, with experience building automation, integrations, or production tooling Experience with REST and/or GraphQL APIs, including testing, debugging, and building integrations Hands-on experience with DevOps and infrastructure automation tools including Kubernetes, Terraform, GitHub Actions, or similar platforms Experience integrating security controls into development, CI/CD, infrastructure, or cloud workflows Experience with cloud security concepts and controls, with Google Cloud Platform (GCP) as the primary cloud environment. Familiarity with AWS, OCI, Azure, or multi-cloud security patterns is preferred Ability to execute tasks with high accuracy and thoroughness and maintain confidentiality when dealing with sensitive information Strong written and verbal communications skills. Ability to explain technical concepts to audiences at different levels Salary Range: $150,000 - $185,000 (Base Salary + Bonus) As a candidate for this position, your salary and related aspects of compensation will be contingent upon your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision. In addition to your salary, MLB believes in providing a competitive compensation and benefits package for its employees. Top MLB Perks & Benefits Competitive Benefits Package Company 401K Contribution Paid Time Off and Holidays Paid Parental Leave Access to Free Tickets to Baseball Games & MLB.TV Discounts at MLB Store | MLBShop.com Employee Assistance Programs (EAP) Onsite/Online Training & Development Programs Tuition Reimbursement Disability Benefits (short term and long term) Life and Accidental Death Insurance Pet Insurance Why MLB? Major League Baseball (MLB) is the most historic of the major professional sports leagues in the United States and Canada. Employees love working at MLB because of the culture of growth, teamwork, and professionalism. Employees who are most successful at MLB take initiative, know how to identify problems and provide solutions, and always put the Team first. For those ready to step up to the plate and join the major leagues, MLB takes the same approach as teams do with their players: empowering our “workforce athletes” to be at their best by engineering experiences that put employees in the best position to succeed. Major League Baseball is looking for candidates who are passionate about growing America’s pastime to best serve its fans for decades to come. California Residents: Please see our California Recruitment Privacy Policy for more details. Colorado Residents: Colorado based applicants may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Applicants requiring a reasonable accommodation for any part of the application and hiring process, please email us at accommodations@mlb.com. Requests received for non-disability related issues, such as following up on an application, will not receive a response. Are you ready to Step Up to the Plate? Apply below!

Lead MLB’s data products portfolio and casual gaming, define and execute long-term vision, manage product roadmaps, collaborate with engineers and data scientists, and innovate new products to grow target audiences. | 12+ years of relevant experience with extensive full stack software development skills, cloud deployment, data visualization expertise, and a passion for baseball data. | Major League Baseball seeks a Senior Director, Digital Innovation to lead MLB’s data products portfolio with an additional focus on casual gaming. This role will define and execute a clear long-term vision, in a way that grows the portfolio’s awareness and effectiveness among core demographics while identifying new partner and revenue opportunities. The position will provide key insights and recommendations relating to MLB’s industry-leading stats platform, Baseball Savant. Responsibilities • Create roadmaps for Baseball Savant as an entity • Innovate new products to grow target audiences • Manage and oversee the preexisting slate of products currently available on Baseball Savant • Work with the Product organization to create and execute on Baseball Savant-based KPIs • Manage vendor relationships • Help develop and expand Baseball Savant and MLB’s gaming portfolio • Ideate visualizations for new metrics with the Content team, and suggest improvements for existing sections of the site • Collaborate with a team of extraordinary engineers and technologists • Work alongside top data scientists on data analysis • Experience in both front-end and back-end work, taking advanced data and making it accessible, entertaining, inviting, and usable, through the use of data visualization • Up-to-date knowledge on current baseball trends with the ability to provide insights on how MLB can utilize data and data visualizations to access a younger demographic • Providing a clear, long-term vision for the Baseball Savant product • Helping to create an efficient product cadence for Baseball Savant that is closer aligned with other Major League Baseball departments • Working with the Baseball Savant team by assisting current engineers to improve the site’s reliability and experience • Helping to innovate new products across the content and gaming departments with the purpose of growing our target audiences • Assisting with engineering tasks to maintain upkeep of MLB’s casual gaming lineup Qualifications & Skills • Twelve (12) or more years of directly relevant professional experience • Extensive experience delivering full stack software solutions using JavaScript (NodeJS/Express, React, D3, three.js) • Intermediate experience with SQL (Postgres and BigQuery preferably) and HTML/CSS • Deployment pipeline through Kubernetes/Github • Experience with cloud-based solutions (Google Cloud Platform, Amazon Web Services, etc.) and developer tools and workflows (Git, GitHub, code reviews, etc.) • A love for and/or experience working with baseball data Salary Range: $170,000 - $225,000 (Base Salary) + Bonus As a candidate for this position, your salary and related aspects of compensation will be contingent upon your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision. In addition to your salary, MLB believes in providing a competitive compensation and benefits package for its employees. Top MLB Perks & Benefits: • 100% Employer Paid Medical/Dental/Vision Premiums • Company Contributed 401K Plan • Paid Time Off and Holidays • Paid Parental Leave • Access to Free Tickets to Baseball Games & MLB.TV • Discounts at MLB Store | MLBShop.com • Employee Assistance Programs (EAP) • Onsite/Online Training & Development Programs • Tuition Reimbursement • Disability Benefits (short term and long term) • Life and Accidental Death Insurance • Pet Insurance Why MLB? Major League Baseball (MLB) is the most historic of the major professional sports leagues in the United States and Canada. Employees love working at MLB because of the culture of growth, teamwork, and professionalism. Employees who are most successful at MLB take initiative, know how to identify problems and provide solutions, and always put the Team first. For those ready to step up to the plate and join the major leagues, MLB takes the same approach as teams do with their players: empowering our “workforce athletes” to be at their best by engineering experiences that put employees in the best position to succeed. Major League Baseball is looking for candidates who are passionate about growing America’s pastime to best serve its fans for decades to come. MLB is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. California Residents: Please see our California Recruitment Privacy Policy for more details. Colorado Residents: Colorado based applicants may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Applicants requiring a reasonable accommodation for any part of the application and hiring process, please email us at accommodations@mlb.com. Requests received for non-disability related issues, such as following up on an application, will not receive a response. Are you ready to Step Up to the Plate? Apply below!

The analyst will support MLB’s Email Security and Cloud Security team by focusing on operational execution, technical analysis, and project coordination. This includes deploying security controls, assisting with email security platforms, and maintaining documentation for security systems. | Candidates should have a bachelor's degree in a related field and at least 2 years of experience in information security or a related technical role. Familiarity with email authentication protocols and cloud security fundamentals is required, along with proficiency in scripting languages. | The Special Projects Information Security Analyst will serve as a key individual contributor supporting Major League Baseball’s Email Security and Cloud Security team. This role focuses on operational execution, technical analysis, and project coordination across two critical domains: email security engineering and cloud security analysis. The analyst will work hands-on with security tools, processes, and data, helping to protect MLB’s communications, cloud environments, and infrastructure from evolving threats. This position offers the opportunity to learn from subject matter experts while contributing to the successful delivery of high-impact security initiatives. Responsibilities Cloud Security Analysis Assist in the deployment, configuration, and monitoring of cloud security controls across public and private clouds (e.g., logging & monitoring, WAF, API security gateways, anti-bot/fraud technologies). Support vulnerability scanning, compliance checks, and incident investigation in cloud environments using industry leading tools. Help integrate and validate security tooling within CI/CD pipelines. Conduct basic log and traffic analysis to identify anomalous or suspicious activity. Email Security Support Assist with the configuration, monitoring, and maintenance of MLB’s email security platforms (e.g., Microsoft Defender for Office 365, Exchange Online Protection, multiple integrated and secure email gateways). Support phishing detection, triage, and remediation efforts. Help manage authentication protocols (SPF, DKIM, DMARC, BIMI, VMC) across the league. Participate in tuning email security policies, blocklists, and advanced rules to reduce false positives and improve detection. Operational Execution Maintain accurate Jira/Asana ticketing, change documentation, and configuration records for security systems. Support proof-of-concept testing for new security tools, documenting results for engineering review. Use scripting languages (Python, Go, PowerShell, Bash) to automate security processes and streamline reporting. Interact with REST, GraphQL APIs and MCP Servers for security tool integration and data collection. Research & Documentation Stay current on email-based and cloud-based threat trends, summarizing findings for engineering teams. Create and update SOPs, runbooks, and security awareness materials. Assist with audit and compliance documentation, ensuring alignment with MLB policies and industry standards. Qualifications & Skills Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field — or equivalent practical experience. 2+ years in an information security, SOC, IT operations, or related technical role. Familiarity with email authentication protocols (SPF, DKIM, DMARC) and cloud security fundamentals. Exposure to security tools such as Microsoft Defender for Office 365, Exchange Online Protection, WAFs, and API gateways. Proficiency in at least one scripting language (Python, Go, PowerShell, Bash). Ability to analyze logs, alerts, and security telemetry to support incident investigation. Comfort working with APIs and automation frameworks. Familiarity with collaboration and tracking tools (e.g., Jira, Asana, Confluence, GitHub). Strong organizational skills; able to manage multiple tasks and shifting priorities. Excellent written and verbal communication; able to translate technical details for varied audiences. Discreet and professional when handling sensitive information. Proactive problem solver with an interest in continuous learning and professional growth. Pay Range: $30.00 - $33.00 per hour The actual offer will carefully consider a wide range of factors, including your work experience, education, skills, and any other factors MLB considers relevant to the hiring decision. Why MLB? Major League Baseball (MLB) is the most historic of the major professional sports leagues in the United States and Canada. Employees love working at MLB because of the culture of growth, teamwork, and professionalism. Employees who are most successful at MLB take initiative, know how to identify problems and provide solutions, and always put the Team first. For those ready to step up to the plate and join the major leagues, MLB takes the same approach as teams do with their players: empowering our “workforce athletes” to be at their best by engineering experiences that put employees in the best position to succeed. Major League Baseball is looking for candidates who are passionate about growing America’s pastime to best serve its fans for decades to come. MLB is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. California Residents: Please see our California Recruitment Privacy Policy for more details. Colorado Residents: Colorado based applicants may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Applicants requiring a reasonable accommodation for any part of the application and hiring process, please email us at accommodations@mlb.com. Requests received for non-disability related issues, such as following up on an application, will not receive a response. Are you ready to Step Up to the Plate? Apply below!

Lead integration and automation of defensive security controls across MLB's software delivery lifecycle and infrastructure to protect digital assets. | Bachelor’s or Master’s in Computer Science or Cybersecurity, 4+ years in security engineering or related roles, proficiency in security tooling and scripting, and relevant security certifications. | As the Senior Manager of Defensive Security, you will be instrumental in Major League Baseball’s effort to embed security into our product design and software delivery lifecycle. You’ll lead the integration of anti-bot, anti-fraud, API, and application security tooling, and automate security controls across our CI/CD pipelines—ensuring our web and mobile platforms remain resilient and trusted by millions of fans and employees alike. Your work will defend the league’s digital assets from emerging threats, ensuring every pitch, stream, and stat is delivered securely to fans around the world. You will also define MLB’s next-generation defensive strategy, including security for agentic AI, MCP infrastructure, and autonomous system-to-system interactions. Responsibilities Security Engineering & Automation Design and implement scalable defensive security controls within CI/CD pipelines, infrastructure-as-code, and cloud-native environments Lead integration of anti-bot, anti-fraud, API security, and application security tools across MLB's digital platforms Improve our security architecture by partnering with DevOps, SRE, Product & Software Engineering teams to embed security early in the software development lifecycle (Shift Left) Threat Defense & Incident Readiness Oversee detection engineering efforts to improve visibility, reduce dwell time, and create actionable security alerts and response automations Partner with the Security Operations and Offensive Security teams to mature incident response playbooks, adversary emulation, and purple team exercises Evaluate threats, vulnerabilities, and attack techniques to ensure proactive defense postures (MITRE ATT&CK, D3FEND-aligned) Take part in the on-call rotation for high-severity incident escalations, particularly during high-profile events such as major game days, ticket launches, or partner broadcasts Vulnerability & Exposure Management Lead vulnerability management activities, ensuring timely identification, triage, and remediation of security findings across infrastructure, applications, and APIs Collaborate with product, IT, and infrastructure teams to prioritize risk-based remediation efforts and report on exposure trends Pilot and integrate agentic AI platforms capable of real-time contextual decision-making (e.g., alert triage, threat hunting, VRM automation) to reduce mean time to respond (MTTR) and analyst fatigue Secure Architecture & Application Hardening Develop and enforce secure design patterns for web, mobile, and API platforms, emphasizing resiliency against modern attack vectors Partner with developers and product teams to conduct architectural threat modeling and review high-impact features or deployments Champion best practices in authentication, session management, data protection, and secure SDLC Define and enforce cloud security architecture standards across AWS, Azure, and GCP, incorporating best practices for workload isolation, IAM, encryption, and control plane monitoring Leadership & Collaboration Mentor and develop a growing team of defensive security engineers and analysts; foster a high-performance, innovation-focused culture Track and report key performance indicators (KPIs) and defensive maturity metrics to security leadership and executive stakeholders Serve as a key security stakeholder across Engineering, IT, Product, Legal, and third-party vendors Develop and maintain operational security playbooks, peer-review standards, and change-control procedures. Act as the primary Defensive Security stakeholder in security governance, risk assessments, and change-advisory board processes Qualifications & Skills Bachelor’s or Master of Computer Science, Software Engineering, or Cybersecurity 4+ years of experience in Dev(Sec)Ops, software engineering, security engineering or a related role Relevant certifications from recognized organizations such as (ISC)², GIAC (SANS), CompTIA, OffSec, ISACA, Security Blue Team, or cloud providers (AWS, Azure, GCP) are a strong plus Experience implementing and managing security tooling in one or more areas: WAF, bot mitigation, RASP, EDR, SIEM, CSPM, SAST/DAST, or API security platforms is required Proficiency in one or more languages such as Python, Go, or Bash for automating security controls and CI/CD workflows is required. Experience with formal SSDLC frameworks (e.g., OWASP SAMM) is a plus Experience securing backend APIs (REST, GraphQL, MCP) developed in languages like Node.js, Java, Python or Go is a plus Deep understanding of modern application architectures (cloud-native, microservices, APIs) and their security implications is required Solid experience with DevOps platforms and IaC (Kubernetes, Terraform, GitHub Actions, etc.) is a plus Capable of independently driving mission-critical initiatives to completion with accuracy and care, exercising sound judgment and discretion in the handling of sensitive or confidential information Strong written and oral communications skills. Ability to explain technical concepts to audiences at different levels Salary Range: $140,000- $175,000 (Base Salary) + Bonus As a candidate for this position, your salary and related elements of compensation will be contingent upon your work experience, education, skills and any other factors Major League Baseball (MLB) considers relevant to the hiring decision. In addition to your salary, MLB believes in providing a competitive compensation and benefits package for its employees. Top MLB Perks & Benefits 100% Employer Paid Medical/Dental/Vision Premiums Company Contributed 401K Plan Paid Time Off and Holidays Paid Parental Leave Access to Free Tickets to Baseball Games & MLB.TV Discounts at MLB Store | MLBShop.com Employee Assistance Programs (EAP) Onsite/Online Training & Development Programs Tuition Reimbursement Disability Benefits (short term and long term) Life and Accidental Death Insurance Pet Insurance Why MLB? Major League Baseball (MLB) is the most historic of the major professional sports leagues in the United States and Canada. Employees love working at MLB because of the culture of growth, teamwork, and professionalism. Employees who are most successful at MLB take initiative, know how to identify problems and provide solutions, and always put the Team first. For those ready to step up to the plate and join the major leagues, MLB takes the same approach as teams do with their players: empowering our “workforce athletes” to be at their best by engineering experiences that put employees in the best position to succeed. Major League Baseball is looking for candidates who are passionate about growing America’s pastime to best serve its fans for decades to come. MLB is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. California Residents: Please see our California Recruitment Privacy Policy for more details. Colorado Residents: Colorado based applicants may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information. Applicants requiring a reasonable accommodation for any part of the application and hiring process, please email us at accommodations@mlb.com. Requests received for non-disability related issues, such as following up on an application, will not receive a response. Are you ready to Step Up to the Plate? Apply below!