Requisition Number: 152360

Position Title: Software Engineer I - Security

External Description:

The Security Engineer is a member of the Verification & Pentest team under the Game & Product Security Engineering group within EA's Information Security department.

As a Security Engineer, your primary job will be to discover vulnerabilities in EA’s games and gaming infrastructure. Your work will help protect our business data, our employee data, and most importantly, our customers.

The security assessments you perform will cover everything from web applications, to network infrastructure, to white-box and black-box reviews of thick clients and servers. In addition to identifying security issues, you’ll need to determine the business risk posed by the vulnerabilities you discover and be able to communicate your findings across teams to both technical and non-technical audiences. You will also assist in EA’s anti-cheating, anti-fraud, and anti-piracy efforts.

The ideal candidate has a deep understanding of security principals and a passion to learn new technologies, challenge assumptions, and find new ways to solve problems.

Focus Areas

• Conduct static and dynamic application security vulnerability research assessments on EA products running on PC, web, mobile, and consoles
• Perform network infrastructure security assessments on game servers and gaming infrastructure
• Advise and consult with EA staff to identify and reduce security risks
• Solve complex technical problems and articulate to both technical and non-technical partners
• Identify root causes for vulnerabilities (whether they be in design, in implementation, or in configuration) and recommend future preventative measures
• Teach, learn, and develop your skillset within the team

Requirements

• Bachelor’s degree or Master’s Degree in Computer Science or Information Security
• Fundamental understanding of CWE Top 25 and OWASP Top 10 vulnerabilities, and ability to discover these vulnerabilities in assessment targets
• Knowledge of operating systems internals for Windows, Linux, iOS, and Android
• Network infrastructure security knowledge for both traditional networks and cloud
• Ability to read and understand unfamiliar code and to identify new application security vulnerabilities in C++, Java, C#, and common scripting languages
• Experience with security assessment tools such as Burp Suite, Nessus, nmap, and Wireshark
• Software development experience and the ability to write your own tools and automation scripts
• Ability to find all instances of a given vulnerability in a product upon discovering a single instance of the vulnerability
• Excellent verbal and written English skills, interpersonal skills, and professionalism in dealing with all levels of management and staff
• Trustworthiness, as you will be trusted to handle sensitive assets

City:

State:

Community / Marketing Title: Security Engineer

Company Profile:

Electronic Arts Inc. es una empresa de software de entretenimiento interactivo líder a nivel mundial. EA distribuye juegos, contenido y servicios en línea para consolas, ordenadores personales, teléfonos móviles y tabletas conectados a Internet.

EEOText: EA ofrece igualdad de oportunidades. Nuestras decisiones de empleo se hacen independientemente de raza, color, nacionalidad, ascendencia, sexo, género, identidad o expresión de género, orientación sexual, edad, información genética, religión, discapacidad, condición médica, embarazo o estado civil, familiar o de veterano, o de cualquier otra característica protegida por ley. También consideramos candidatos cualificados con antecedentes penales, de acuerdo a la ley aplicable. EA también lleva a cabo ajustes de espacios de trabajo para individuos cualificados con discapacidades, de acuerdo con la ley aplicable.

Days Open: 148

Can this position be remote?:

EEO Employer Verbiage:

EA ofrece igualdad de oportunidades. Nuestras decisiones de empleo se hacen independientemente de raza, color, nacionalidad, ascendencia, sexo, género, identidad o expresión de género, orientación sexual, edad, información genética, religión, discapacidad, condición médica, embarazo o estado civil, familiar o de veterano. EA también lleva a cabo ajustes de espacios de trabajo para individuos cualificados con discapacidades, de acuerdo con la ley aplicable.