Offensive Security Engineer

Locations

• Austin, Texas, United States of America
• Redwood City, United States of America
• Kirkland, United States of America
• Orlando, United States of America

Role

Worker Type:
Regular Employee

Studio/Department: CT - Security

Work Model:
Hybrid

Electronic Arts creates next-level entertainment experiences that inspire players and fans around the world. Here, everyone is part of the story. Part of a community that connects across the globe. A place where creativity thrives, new perspectives are invited, and ideas matter. A team where everyone makes play happen.

Offensive Security Engineer – Enterprise Red Team

The EA Security team protects EA by reducing our exposure to security risks by raising awareness and providing a measured, proportionate set of security and risk management controls, services and solutions.

EA is looking for a security engineer to join EA's Enterprise Red Team. You will help us identify threat vectors before they can be exploited in our systems, services, cloud infrastructure or applications. We're a team that can find the worst of the worst, knows what's most likely to be attractive to attackers, and we're motivated to make things better.

You will report to the Enterprise Red Team Director to work on an offensive security-driven application security program that scales enterprise-wide with a focus on automation, exploitation and best-practices.

• Be part of the offense! Find and exploit security vulnerabilities for defensive purposes to help identify risks and lead mitigations
• Perform architecture and threat model reviews to identify security vulnerabilities with a focus on AI applications, agents, and infrastructure
• Build automation to scale penetration testing and to test threat detection and response capabilities
• Develop, pilot and operate flexible and creative security testing automation
• Collaborate with engineers across EA to identify automation gaps and rapid prototyping of new ideas and mitigations
• Support traditional red team assessments, adversarial emulation campaigns and penetration tests of EA's systems to discover and document high risk vulnerabilities
• Support incident response activities as required

• 4+ years' experience in penetration testing and/or red team operations
• 2+ years programming experience in at least one of the following:
  Golang, Python, Java, C#, C/C++
• Working knowledge of Dev Sec Ops  and CI/CD pipelines and related tooling (Gitlab, Github, Jenkins,…)
• Application Analysis (fuzzing, static analysis, app scanning)
• Familiarity with reviewing source code for security vulnerabilities and related tooling (Code QL, semgrep,…)
• Basic understanding of machine learning its attack surface
• Advanced knowledge in application security, network security, authentication protocols
• Proficiency in one or more operating systems:
  Linux, Windows, macOS
• Experience with tooling such as Metasploit, Bloodhound, Burp, Prompt Foo, ZAP, Sliver,…
• Web and Database Penetration Testing Experience

The ranges listed below are what EA in good faith expects to pay applicants for this role in these locations at the time of this posting. If you reside in a different location, a recruiter will advise on the applicable range and benefits. Pay offered will be determined based on a number of relevant business and candidate factors (e.g. education, qualifications, certifications, experience, skills, geographic location, or business needs).

* Washington (depending on location e.g. Seattle vs. Spokane) $108,900 - $145,200 USD

In the US, we offer a package of benefits including paid time off (3 weeks per year to start), 80 hours per year of sick time, 16 paid company holidays per year, 10 weeks paid time off to bond with baby, medical/dental/vision insurance, life insurance, disability insurance, and 401(k) to regular full-time employees. Certain roles may also be eligible for bonus and equity.

We’re proud to have an extensive portfolio of games and experiences, locations around the world, and opportunities across EA. We value adaptability, resilience, creativity, and curiosity.…