filler

Sr. Application Security Response Engineer

여러 위치: Guildford, UK • Bucharest, Romania • Birmingham, UK • Runcorn, UK • Manchester, UK • Stratford, London, UK • Romania • United Kingdom

참고

더 이상 지원할 수 없는 직책입니다.

Requisition Number: 176167

Position Title: Software Engineer III - Security

External Description:

  • Remote Options*

EA's Secure Product Engineering & Anti-Cheat Response (SPEAR) team ensures that all EA products are developed with security and gameplay integrity as a top priority. We partner with platform development teams and game studios to ensure that our players can enjoy playing games securely and fairly.

Description

We are looking for a Senior Application Security Response Engineer to assess and mitigate threats to EA's products, data, and customers. You will respond to vulnerabilities reported through our coordinated vulnerability disclosure program, and look for variants across the EA environment. You'll be the first engineer called in when application security risks affecting our products or players, are reported. You'll consult with product teams on vulnerabilities, mitigations, and setting up additional monitoring/detections to assess remediation effectiveness.

Ideally, you'll have a broad understanding of security principles, hands-on experience of vulnerability assessment, and a passion to learn new technologies, challenge assumptions, and create new solutions. You will report to the Senior Manager of the Verification and Pentest team.

Responsibilities:

  • Partner with our PMO to quickly evaluate and respond to vulnerabilities reported through our Coordinated Vulnerability Disclosure program.
  • Correctly rate the security impact of discovered vulnerabilities and articulate remediation steps
  • Collaborate across security teams, studios, and product development teams to fix vulnerabilities in our platforms and products
  • Search logs for Indicators of Compromise and create detections to monitor for future abuse
  • Support our Global Security Incident Response team with application security expertise
  • Perform scoped static and dynamic application security assessments on EA products running on PC, web, mobile, consoles and cloud
  • Identify systemic vulnerability trends and patterns, engaging in tactical and strategic conversations to address these at scale
  • Combine external research with EA-specific knowledge, delivering talks and presentations that educate your team and partners in studios and product teams
  • Conduct technical interviews & offer feedback on peer work

Qualifications:

  • Experience discovering CWE Top 25 and OWASP Top 10 vulnerabilities and providing remediation guidance
  • At least five years hands-on experience of full stack Application Security reviews that span multiple platforms and programming languages.
  • Experience querying logs and setting up monitors through a log aggregation platform, such as LogStash, Splunk or DataDog
  • Knowledge in multiple of the following domains and expertise: Networking, OS Internals, Cloud Architecture, Web Frameworks, or Mobile Architecture
  • Knowledge of best practices and common pitfalls in multiple of: cryptography, authentication mechanisms, authorization controls and DevSecOps
  • Knowledge of multiple of the following exploitation techniques and expertise: XSS, SQLi, IDOR, MitM, DoS, BOF, or ROP
  • Excellent verbal and written English skills
  • Bachelor's degree in Computer Science or Information Security, or equivalent industry experience

City:

State:

Community / Marketing Title: Sr. Application Security Response Engineer

Company Profile:

Electronic Arts Inc.는 세계를 선도하는 인터랙티브 엔터테인먼트 소프트웨어 기업입니다. EA는 인터넷 콘솔, 개인용 컴퓨터, 휴대전화, 태블릿용 게임과 콘텐츠 및 온라인 서비스를 제공합니다.

EEOText: EA는 균등한 기회의 제공을 실천합니다. 모든 채용은 인종, 피부색, 출신 국가, 혈통, 생물학적/사회적 성별, 성 정체성 또는 표현, 성적 성향, 나이, 유전 정보, 종교, 장애 여부, 질병 유무, 임신 여부, 혼인 상태, 가족 상황, 군 복무 여부 등의 요인을 고려하지 않고 결정됩니다. EA는 관련 법률에서 명시하는 대로 업무 공간에 장애가 있는 입사 지원자 또는 예정자를 위한 시설을 마련해두고 있습니다.

Days Open: 70

Can this position be remote?: 1

EEO Employer Verbiage:

EA는 균등한 기회의 제공을 실천합니다. 모든 채용은 인종, 피부색, 출신 국가, 혈통, 생물학적/사회적 성별, 성 정체성 또는 표현, 성적 성향, 나이, 유전 정보, 종교, 장애 여부, 질병 유무, 임신 여부, 혼인 상태, 가족 상황, 군 복무 여부 등의 요인을 고려하지 않고 결정됩니다. EA는 관련 법률에서 명시하는 대로 업무 공간에 장애가 있는 입사 지원자 또는 예정자를 위한 시설을 마련해두고 있습니다.

Click here to view our Data Privacy Policy.

google-site-verification: google7f7a22bb8fdf2c3d.html