Information Security Engineer

THE ROLE:

Probably Monsters is currently seeking an Information Security Engineer to help secure the data, assets, and systems that enable us to make world‑class games and ensure they remain available for our players. Do you enjoy tackling unique challenges and creating solutions to empower your team's workflow while reducing risk? Are you looking for an opportunity to leave your mark on the world around you?

If so, we may be looking for you! Our Information Security Engineering team supports organizations across our family of studios to provide architectural feedback, analyze systems and policies, maintain and deploy new information security systems, provide user education, and respond to security incidents in studio and production environments. Join our family of studios and build solutions and systems to protect the availability and integrity of our teams, our assets, and our customers.

• You are a security professional who is comfortable working in dynamic, technology-heavy environments.
• You are an effective communicator with experience working across teams and departments, seeking ways to promote a culture of trust and respect.
• You are a team player who enjoys collaborating to solve problems.
• You are someone with strong time management and prioritization skills.
• You are an automation and systems advocate that's always on the lookout for ways to eliminate manual processes.
• You are comfortable working with light supervision and in situations with ambiguous requirements. You are a gamer or someone familiar with video gaming and the games industry.
• You enjoy engaging with teams to identify their needs and provide them with insight.
• You are curious and delighted by discoveries and trends in the security space.

• Selection, implementation, and refinement of existing and new information security systems; to include vulnerability management solutions, security event management, endpoint security and antivirus, network security monitoring and content filtering, and forensics capabilities within the infrastructure; developing and utilizing automation where possible.
• Review and monitor existing network, systems, and tools for compliance with company security standards.
• Evaluate new technologies and processes that enhance security capabilities.
• Confer with users to discuss issues such as access needs, evaluating new tools, and investigating security violations.
• Train users and promote security awareness to ensure system security and to improve server and network efficiency.
• Assess and govern the security posture of AI/ML systems in use across studios, including LLM integrations, AI‑assisted development tools, and generative AI platforms; develop and enforce AI usage policies to mitigate risks such as data leakage, prompt injection, model abuse, and insecure AI outputs.
• Implement and maintain a Zero Trust security architecture across studio and cloud environments, including identity‑centric access controls, micro‑segmentation, and continuous verification principles.
• Lead security operations center (SOC) functions including threat detection, triage, and response using SIEM, SOAR, and XDR platforms; develop and maintain playbooks for common incident types.

• In-depth understanding of information technology and information security practices, including the areas of application security, policy development, security‑related research, physical security, systems integrity, and disaster recovery.
• Ability to rapidly learn new technologies and business functions. Good analytical skills and the ability to multi‑task.
• Experience selecting, maintaining, configuring, and operating vulnerability management, security event management, endpoint security and antivirus, firewall, network security monitoring, and content filtering solutions.
• Experience implementing security applications, including installation, configuration, and automation of processes.
• Experience with networking technologies, such as firewalls, routers, load balancers, and proxies.
• Knowledge of network‑based protocols such as TCP/IP, HTTP, HTTPS, DNS.
• Knowledge of datacenter and cloud live production best practices and experience…