This job might no longer be available.
Information Security Engineer (Web)
4 years ago
Epic Games is looking for an Information Security Engineer to help ensure the confidentiality, integrity, and availability of Epic Games’ information systems. Working with various security tools and technologies, you will help ensure our applications and gaming systems are secure.
Responsibilities:
- Penetration Testing - Defines and updates a mature pen testing methodology and conducts high-quality tests for weakness against both common and bespoke applications and architectures
- Web Application Security Assessments - Defines and updates a Web application security methodology and performs assessments across internal, external web applications.
- Secure Coding - Keeps Web development teams apprised of secure coding best practice, and assists with static/dynamic code analysis.
- Vulnerability Management - Tracks internally and externally identified bugs and works as a liaison to Web development teams to address remediation or mitigation of identified findings.
- Blue Team Cross Training - Remains abreast of Application Security threats and defines and develops InfoSec training on web-based exploits/tools and corresponding mitigation techniques.
- Risk Reports - Combines data from all Red-Team initiatives and reports on risk to system owners and leadership
Qualifications:
- 5+ knowledge of Information Security principles, technology, and control processes
- 3+ years with hands on Red Team experience
- Prior experience with reverse engineering, malware analysis, forensic tools as well as physical security exploitation techniques
- Experience with providing security services as part of a SDLC.
- Experience with Secure Coding and AppSec frameworks (OWASP Guide, SANS CWE Top 25, CERT Secure Coding)
- Excellent oral and written communication skills, including report writing and technical documentation
- CEH and Offensive Security Certification (OSCP, GPEN, or GWAPT)
- Passion for games a plus
This is going to be Epic!
#LI1
Create Your Profile — Game companies can contact you with their relevant job openings.