Application Security Analyst II
位置: Austin, TX, USA
Requisition Number: 185747
Position Title: Security Analyst
External Description:
Application Security Analyst II - Remote
We are looking for an Application Security Analyst to help us actively defend EA’s products, data, and players. This remote-friendly role will report to the Senior Manager of the Verification and Pentest (VAP) team within the Secure Product Engineering and Anti-cheat Response (SPEAR) organization. You will work with a diverse set of timezones working most closely with a Europe-based counterpart.
Responsibilities
- You will triage and investigate cases reported through our Coordinated Vulnerability Disclosure (CVD) program and partner with developers to guide remediations
- You will use your application security knowledge to identify proactive monitoring opportunities to detect future abuse across our applications
- You will investigate daily alerts, search logs for Indicators of Compromise (IoCs) and create or enhance detections
- You will identify systemic vulnerability trends and patterns, and engage EA security teams to prevent these at scale
- You will correctly rate the security impact of discovered vulnerabilities, articulate remediation steps to product teams, and report impact to leadership
- You will deliver talks and presentations within EA, including internal conferences
Qualifications
- At least three years hands-on experience of full stack Application Security reviews that span multiple platforms and programming languages
- Experience discovering and remediating CWE Top 25 and OWASP Top 10 vulnerabilities
- Experience querying logs and setting up detections through a log aggregation platform, such as Grafana
- Experience handling coordinated vulnerability disclosure programs
- Hands-on experience with security assessment tools and understanding of their applicability and limitations in different assessment scenarios
- Knowledge in multiple of the following domains and expertise in at least one: Networking, OS Internals, Cloud Architecture, Web Frameworks, or Mobile Architecture
- Knowledge of best practices and common pitfalls in one or more of: cryptography, authentication mechanisms, authorization controls and network configurations
- Knowledge of multiple of the following exploitation techniques and expertise in at least one: XSS, SQLi, IDOR, MitM, DoS, BOF, or ROP
- Excellent verbal and written English skills
- Bachelor’s degree or Master’s Degree in Computer Science or Information Security, or equivalent industry experience
|
US COMPENSATION AND BENEFITS The base salary ranges listed below are for the defined geographic market pay zones in these states. If you reside outside of these locations, a recruiter will advise on the base salary range and benefits for your specific location. EA has listed the base salary ranges it in good faith expects to pay applicants for this role in the locations listed, as of the time of this posting. Salary offered will be determined based on numerous relevant business and candidate factors including, for example, education, qualifications, certifications, experience, skills, geographic location, and business or organizational needs. BASE SALARY RANGES • California (depending on location e.g. Los Angeles vs. Sacramento): º $103,200 - $145,600 USD Annually • New York (depending on location e.g. Manhattan vs. Buffalo): º $92,600 - $145,600 USD Annually • Jersey City, NJ : º $117,300 - $145,600 USD Annually • Colorado (depending on location e.g. Denver vs. Colorado Springs): º $111,800 - $151,800 USD Annually • Washington (depending on location e.g. Seattle vs. Spokane): º $92,600 - $135,600 USD Annually Base salary is just one part of the overall compensation at EA. We also offer a package of benefits including paid time off (3 weeks per year to start), 80 hours per year of sick time, 16 paid company holidays per year, 10 weeks paid time off to bond with baby, medical/dental/vision insurance, life insurance, disability insurance, and 401(k) to regular full-time employees. Certain roles may also be eligible for bonus and equity. |
City:
State:
Community / Marketing Title: Application Security Analyst II
Company Profile:
Electronic Arts Inc.は、インタラクティブ・エンターテイメント・ソフトウェアの世界的大手企業です。 EAは、インターネットに接続されたコンソール、パソコン、携帯電話、タブレットに対してゲーム、コンテンツおよびオンラインサービスを提供しています。
EEOText: EAは雇用機会を均等に提供します。 雇用に関する決定を下す際は、人種、肌の色、国籍、出身国、出身民族、身体的性別、社会/文化/心理的性別、性別自認または性別表現、性的指向、年齢、遺伝情報、宗教、身体障害、病状、妊娠、婚姻状況、家族状況、軍役経験の有無、および法律で保護されたその他のあらゆる状況は考慮されません。 また、犯罪歴のある人物の雇用も、募集要項を満たす応募者の場合は適用法令に従って検討します。 さらにEAでは、身体に障害のある方々のために、適用法令によって定められた職場環境を整えることも行っています。
Days Open: 8
Can this position be remote?: 1
EEO Employer Verbiage:
EAは雇用機会を均等に提供します。 雇用に関する決定を下す際は、人種、肌の色、国籍、出身国、出身民族、身体的性別、社会/文化/心理的性別、性別自認または性別表現、性的指向、年齢、遺伝情報、宗教、身体障害、病状、妊娠、婚姻状況、家族状況、軍役経験の有無は考慮されません。 さらにEAでは、身体に障害のある方々のために、適用法令によって定められた職場環境を整えることも行っています。