This job might no longer be available.

Senior Security Developer

Job Title: Senior Security Developer

Team: Admin Security Engineering

Location: India

About the Company:

Electronic Arts Inc. is a global leader in interactive entertainment. We develop games, content and online services across platforms. We have a broad portfolio of brands that span the most popular genres. We exist to Inspire the World to Play. We create extraordinary new game experiences for our millions of players everywhere by bringing together experienced people that combine creativity, innovation, and passion. We immerse our employees into an inclusive culture and provide opportunities for learning and leading that allow our employees to do the most impactful and rewarding work of their careers.

The hiring team, Admin Security Engineering, is an engineering and architecture team that focuses on Identity and Security products. Our mission is to deliver maximum value to the business by balancing security against the experience provided by our solutions. We are uniquely positioned to deliver high-impact results that have tremendous value to the business across several technology areas. ASE is a fast paced, fast-fail agile team which experiments on products, does POCs and recommends solutions for privileged identities and workspaces.

Job Description: In this role, you will improve the security posture of our enterprise services and focus on security design and development. To be successful in this role you will require to have a good understanding of broad IT services such as network, storage, hypervisor, identity, monitoring, and backup systems. An effective candidate for this role has experience working in large enterprise environments as well as security consultancy.

Major Duties and Responsibilities:

• You will build partnerships and develop security engineering practices.
• Perform engineering reviews of security-important services and supply design guidance.
• You will be involved with the development of tools and platforms that help build enterprise-class products.
• You will develop a broad and deep technical understanding of EA products, services, and architectures, using that understanding to promote your reviews and recommendations.
• You will lead discussions in business and technical information technology solution implementations, upgrades, enhancement, and conversions.
• You will be an advocate for security knowledge and education across our teams while leading our approach on design, Infrastructure as Code, Automation, and DevOps.
• You will support and collaborate security requirements across teams building EA enterprise products.
• Help mentor engineer teams and further our knowledge through learning while staying informed and work on solutions for the latest threats, vulnerabilities, and new controls and around security posture .

• Design, develop and test cyber security features, as services and cross platform shareable components, with high quality design and demonstrating state-of-art development practices.
• Knowledge of Security, Authentication, Authorization, Certificate Management, and cryptography.
• Apply principles of SDLC and methodologies like Lean/Agile, DevOps, Software and Product Security.
• Lead the technical design, implementation, and validation of a highly secure, resilient, and performant cloud infrastructure

Qualifications for the Job:

• 8 or more years' experience working on cloud services solutions on AWS or Azure
• Minimum of 10 years’ experience in a security engineer/security architect/security developer role
• You understand security best practices for services deployed using AWS, Azure, and GCP You should sport expertise in multiple of the following domains: Networking, OS Internals, Cloud Architecture, Web Frameworks, Identity and Access Management, DevSecOps, Cryptography.
• You should display familiarity with modern authentication protocols and Zero-Trust components and capabilities.
• You understand CIS/NIST baselines and experience implementing solutions that are at par with the latest guidelines.
• You understand auditing and alerting within an enterprise environment.
• You have written code in scripting languages such as Python, Bash, Node.js, and PS.
• You have experience using Infrastructure as code software tools, HashiCorp Terraform, AWS Cloud Formation, Azure Resource Manager.
• You have dabbled in building, configuring Docker containers, and using any of the container management technologies, such as Kubernetes
• You have 5+years in Software Engineering, DevOps in a large Cloud based environment.
• You have 3+ years of experience in cloud infrastructure security engineering, SecDevOps.
• You have experience developing, implementing, and operating large-scale IaaS, ultra-highly available and highly secure cloud environments/services.
• You have implemented core security controls such as logging, monitoring, vulnerability scanning, intrusion detection, identity and access management, secrets management, virtualization security, network security features for cloud services and infrastructure assets.
• You have supported application deployments, built new systems and upgraded and patching existing ones.
• Strong programming experience in at least one of these languages: Python, Java, JavaScript, Shell, GO

Nice to have:

• You have used third-party platforms to perform continuous security assessments like CASB, CSPM, and SIEMs.
• You understand Identity products and frameworks including Active Directory, RedHat IDM, Azure AD, Okta, SAML, OAuth, etc.
• You have intermediate-level knowledge in TCP/IP, UDP, HTTPS, DHCP, DNS, NAT, Security Groups, ELBs, VPN technology