Offensive Security Engineer

Electronic Arts creates next-level entertainment experiences that inspire players and fans around the world. Here, everyone is part of the story. Part of a community that connects across the globe. A place where creativity thrives, new perspectives are invited, and ideas matter. A team where everyone makes play happen.

The EA Security team protects EA by reducing our exposure to security risks by raising awareness and providing a measured, proportionate set of security and risk management controls, services and solutions.

EA is looking for a security engineer to join EA's Enterprise Red Team. You will help us identify threat vectors before they can be exploited in our systems, services, cloud infrastructure or applications. We're a team that can find the worst of the worst, knows what's most likely to be attractive to attackers, and we're motivated to make things better.

You will report to the Enterprise Red Team Director to work on an offensive security-driven application security program that scales enterprise-wide with a focus on automation, exploitation and best-practices.

• Be part of the offense! Find and exploit security vulnerabilities for defensive purposes to help identify risks and lead mitigations
• Perform architecture and threat model reviews to identify security vulnerabilities with a focus on AI applications, agents, and infrastructure
• Build automation to scale penetration testing and to test threat detection and response capabilities
• Develop, pilot and operate flexible and creative security testing automation
• Collaborate with engineers across EA to identify automation gaps and rapid prototyping of new ideas and mitigations
• Support traditional red team assessments, adversarial emulation campaigns and penetration tests of EA's systems to discover and document high risk vulnerabilities
• Support incident response activities as required

• 4+ years' experience in penetration testing and/or red team operations
• 2+ years programming experience in at least one of the following:
  Golang, Python, Java, C#, C/C++
• Working knowledge of Dev Sec Ops  and CI/CD pipelines and related tooling (Gitlab, Github, Jenkins,…)
• Application Analysis (fuzzing, static analysis, app scanning)
• Familiarity with reviewing source code for security vulnerabilities and related tooling (Code QL, semgrep,…)
• Basic understanding of machine learning its attack surface
• Advanced knowledge in application security, network security, authentication protocols
• Proficiency in one or more operating systems:
  Linux, Windows, macOS
• Experience with tooling such as Metasploit, Bloodhound, Burp, Prompt Foo, ZAP, Sliver,…
• Web and Database Penetration Testing Experience

The ranges listed below are what EA in good faith expects to pay applicants for this role in these locations at the time of this posting. If you reside in a different location, a recruiter will advise on the applicable range and benefits. Pay offered will be determined based on a number of relevant business and candidate factors (e.g. education, qualifications, certifications, experience, skills, geographic location, or business needs).

• California (depending on location e.g. Los Angeles vs. San Francisco) $117,000 - $179,600 USD
• Washington (depending on location e.g. Seattle vs. Spokane) $108,900 - $145,200 USD

In the US, we offer a package of benefits including paid time off (3 weeks per year to start), 80 hours per year of sick time, 16 paid company holidays per year, 10 weeks paid time off to bond with baby, medical/dental/vision insurance, life insurance, disability insurance, and 401(k) to regular full-time employees. Certain roles may also be eligible for bonus and equity.

Pay is just one part of the overall compensation  adopt a holistic approach to our benefits programs, emphasizing physical, emotional, financial, career, and community wellness to support a balanced life. Our packages are tailored to meet local needs and may include healthcare coverage, mental well-being support, retirement savings, paid time off, family leaves, complimentary games, and more. We nurture environments where our teams can always bring their best to what they do.

Electronic Arts is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status or any other characteristic protected by law. We will also consider employment qualified applicants with criminal records in accordance with applicable law.

EA also makes workplace accommodations for qualified individuals with disabilities as required by applicable law.