This job might no longer be available.

Software Engineer, Application Security

King

Austin

2 years ago

Apply

Craft:

Job Description:

We are looking for a talented and motivated Software Engineer specializing in Application Security to join its ranks in Irvine, CA. If this is you, you are a Software Engineer with a deep passion for security. This person should have experience with a variety of systems, languages, tools and architectures.

About Our Team

The Security Development (SecDev) organization owns all security- related software development efforts across Blizzard. We are a mix of hardcore software engineers, server developers and security- minded individuals who work together to ensure that our company and players are safe from Evil.

We work with all games and software platforms produced by Blizzard, so we get exposed to a mind- boggling array of technologies – not only security technologies, but graphic engines, machine learning systems, web servers, databases etc. It’s an incredible place for passionate software developers to get acquainted with all aspects of developing world class video games.

You will be part of SecDev’s Application Security team. You will embed yourself in one or more of Blizzard’s teams to help them build secure software. Not only you will help find and fix existing vulnerabilities, but also actively participate on preventing new vulnerabilities from being introduced. You will also have the opportunity to work with elite software engineers to solve specific hard security problems, “tiger team” style.

Responsibilities

Perform security reviews and provide insights throughout all phases of software development with our partner teams.
Develop and enhance new and existing security- focused tools, systems and services.
Evaluate the impact to the organization of current security advisories, publications, and trends.
Develop new security solutions/tools to prevent security vulnerabilities and assist in addressing existing security problems.
Help detect, highlight, and close security vulnerabilities that surface during the software development lifecycle.

Requirements

Bachelor’s Degree in Computer Science or equivalent experience.
A minimum of 3 years experience in secure Web Application development.
Expert knowledge of security problems associated with modern web languages and frameworks, including but not limited to Javascript (front and backend), Java and C#.
Knowledge of penetration testing techniques, application security vulnerabilities, OWASP Top 10, SANS 25, CWE, and whitebox exploitation via Burpsuite/Fiddler or similar.
Excellent ability to discover and demonstrate flaws such as SQL injection, XSS, and CSRF.
Solid understanding of database (SQL, noSQL) security.
Knowledge of encryption theory and practice (e.g. TLS, HMAC, RSA, AES, PKI) .
Be able to adapt and be entrepreneurial and solve problems quickly, creatively, and collaboratively.

Pluses

Aptitude for doing threat modeling on complex systems.
Experience in Mobile software development and security.
Experience with application security testing tools (static and dynamic code analyzers, fuzzing tools).

COVID- 19 Hiring Update:

We’ve transitioned to a work- from- home model and we’re continuing to interview and hire during this time. This role is expected to begin as a remote position. We understand each person’s circumstances may be unique and will work with you to explore possible interim options.

Blizzard Entertainment is a global company committed to growing our employees along with the business. We offer generous benefits and perks with an eye on providing true work / life balance. We’ve worked hard to foster an intensely collaborative and creative environment, a diverse and inclusive employee culture, and training and opportunity for professional growth. Our people are everything. Our core values are real, and our mission has never changed. We are dedicated to creating the most epic entertainment experiences…ever. Join us!

About King

King is a leading interactive entertainment company for the mobile world, with people all around the world playing one or more of our games, including franchises such as Candy Crush, Farm Heroes, Pet Rescue and Bubble Witch.
We have 249 million monthly active users as of fourth quarter 2019 across web, social and mobile platforms. King was acquired by Activision Blizzard Inc. (Nasdaq ATVI) in February 2016 and operates as an independent unit of the
company.

A Great Saga Needs All Sorts of Heroes

Making games is fun. Especially when you do it with people who share the same idea of what makes a good workplace great. We design games for everyone, no matter where they are or who they are, and we employ all sorts of people from all kinds of backgrounds to bring them to life. Truth is, we simply cannot expect diversity in our players and originality in our games without first nurturing it in our people. A great saga needs all sorts of heroes.

Making the World Playful

Making the World Playful is what inspires us to create new experiences and raise the bar. It’s what makes King a place where we can all dream bigger, continue to add innovation to our games, broadening the portfolio and exploring new territories in mid- core and casual. We take the art and science of gaming to the next level through our curiosity for the unexplored, passion for games, respect for each other and love for our players – and we’re not afraid to have fun along the way. In fact, together with our parent company Activision Blizzard and experts around the world, we believe having fun is good for you. There has never been a better time to join us. We're dreaming bigger and see a world of possibilities ahead. If you share our passion, our values, and our hunger to shape the future, join us in Making the World Playful!

Applications needs to be in English.
Discover King at careers.king.com

Create Your Profile — Game companies can contact you with their relevant job openings.

Apply

Software Engineer, Application Security

About Our Team

The Security Development (SecDev) organization owns all security- related software development efforts across Blizzard. We are a mix of hardcore software engineers, server developers and security- minded individuals who work together to ensure that our company and players are safe from Evil.

Responsibilities

Perform security reviews and provide insights throughout all phases of software development with our partner teams.

Develop and enhance new and existing security- focused tools, systems and services.

Evaluate the impact to the organization of current security advisories, publications, and trends.

Develop new security solutions/tools to prevent security vulnerabilities and assist in addressing existing security problems.

Help detect, highlight, and close security vulnerabilities that surface during the software development lifecycle.

Requirements

Bachelor’s Degree in Computer Science or equivalent experience.

A minimum of 3 years experience in secure Web Application development.

Expert knowledge of security problems associated with modern web languages and frameworks, including but not limited to Javascript (front and backend), Java and C#.

Knowledge of penetration testing techniques, application security vulnerabilities, OWASP Top 10, SANS 25, CWE, and whitebox exploitation via Burpsuite/Fiddler or similar.

Excellent ability to discover and demonstrate flaws such as SQL injection, XSS, and CSRF.

Solid understanding of database (SQL, noSQL) security.

Knowledge of encryption theory and practice (e.g. TLS, HMAC, RSA, AES, PKI) .

Be able to adapt and be entrepreneurial and solve problems quickly, creatively, and collaboratively.

Pluses

Aptitude for doing threat modeling on complex systems.

Experience in Mobile software development and security.

Experience with application security testing tools (static and dynamic code analyzers, fuzzing tools).

COVID- 19 Hiring Update:

We’ve transitioned to a work- from- home model and we’re continuing to interview and hire during this time. This role is expected to begin as a remote position. We understand each person’s circumstances may be unique and will work with you to explore possible interim options.