Application Security Analyst

Requisition Number: 185745

Position Title: Security Analyst

External Description:

We are looking for an Application Security Analyst to help us actively defend EA’s products, data, and players. This remote-friendly role will report to the Senior Manager of the Verification and Pentest (VAP) team within the Secure Product Engineering and Anti-cheat Response (SPEAR) organization. You will work with a diverse set of timezones working most closely with an North American-based counterpart.

 

Responsibilities

• You will triage and investigate cases reported through our Coordinated Vulnerability Disclosure (CVD) program and partner with developers to guide remediations
• You will use your application security knowledge to identify proactive monitoring opportunities to detect future abuse across our applications
• You will investigate daily alerts, search logs for Indicators of Compromise (IoCs) and create or enhance detections
• You will identify systemic vulnerability trends and patterns, and engage EA security teams to prevent these at scale
• You will correctly rate the security impact of discovered vulnerabilities, articulate remediation steps to product teams, and report impact to leadership
• You will deliver talks and presentations within EA, including internal conferences

 

Qualifications

• At least three years hands-on experience of full stack Application Security reviews that span multiple platforms and programming languages
• Experience discovering and remediating CWE Top 25 and OWASP Top 10 vulnerabilities
• Experience querying logs and setting up detections through a log aggregation platform, such as Grafana
• Experience handling coordinated vulnerability disclosure programs
• Hands-on experience with security assessment tools and understanding of their applicability and limitations in different assessment scenarios
• Knowledge in multiple of the following domains and expertise in at least one: Networking, OS Internals, Cloud Architecture, Web Frameworks, or Mobile Architecture
• Knowledge of best practices and common pitfalls in one or more of: cryptography, authentication mechanisms, authorization controls and network configurations
• Knowledge of multiple of the following exploitation techniques and expertise in at least one: XSS, SQLi, IDOR, MitM, DoS, BOF, or ROP
• Excellent verbal and written English skills
• Bachelor’s degree or Master’s Degree in Computer Science or Information Security, or equivalent industry experience

City:

State:

Community / Marketing Title: Application Security Analyst

Company Profile:

Electronic Arts Inc.는 세계를 선도하는 인터랙티브 엔터테인먼트 소프트웨어 기업입니다. EA는 인터넷 콘솔, 개인용 컴퓨터, 휴대전화, 태블릿용 게임과 콘텐츠 및 온라인 서비스를 제공합니다.

EEOText:

About Electronic Arts

We’re proud to have an extensive portfolio of games and experiences, locations around the world, and opportunities across EA. We value adaptability, resilience, creativity, and curiosity. From leadership that brings out your potential, to creating space for learning and experimenting, we empower you to do great work and pursue opportunities for growth.

We take a holistic approach with our benefits program, focusing on physical, emotional, financial, career, and community wellness to support a balanced life with paid time off and new parent leave, plus free games and so much more. We nurture environments where our teams can always bring their best to what they do.

Electronic Arts is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. We will also consider employment qualified applicants with criminal records in accordance with applicable law. EA also makes workplace accommodations for qualified individuals with disabilities as required by applicable law.

Days Open: 14

Can this position be remote?: 1

EEO Employer Verbiage:

EA는 균등한 기회의 제공을 실천합니다. 모든 채용은 인종, 피부색, 출신 국가, 혈통, 생물학적/사회적 성별, 성 정체성 또는 표현, 성적 성향, 나이, 유전 정보, 종교, 장애 여부, 질병 유무, 임신 여부, 혼인 상태, 가족 상황, 군 복무 여부 등의 요인을 고려하지 않고 결정됩니다. EA는 관련 법률에서 명시하는 대로 업무 공간에 장애가 있는 입사 지원자 또는 예정자를 위한 시설을 마련해두고 있습니다.