Security Engineer (Cybersec) On-site
Core
Design, build, and harden security controls for games, platforms, and player data across cloud, network, application, and endpoint domains.
Role type
Security Engineer (Cybersec)
Builds
Security controls, secure SDLC integration, detection playbooks, and internal security tooling for game platforms.
Domain
Cybersecurity, Cloud Security, Application Security
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Application security (OWASP, threat modeling), Cloud security (GCP), SAST/DAST/SCA/IaC scanning, Python/Bash/Go scripting, CI/CD security integration, SIEM/XDR tuning (Wazuh), Incident response, Linux/Kubernetes hardening, Vulnerability management
Preferred skills
Container security (Docker, Kubernetes), Infrastructure as Code (Terraform, Ansible), Microsoft 365 security, Security frameworks (ISO 27001, NIST, CIS)
Technologies
Wazuh, InsightIDR, SonarQube, Semgrep, Snyk, Trivy, OWASP ZAP, Burp Suite, GitLab CI, GitHub Actions, Jenkins, Terraform, Ansible, Kubernetes, Docker, Python, Bash, Go, Java, JavaScript/TypeScript
Responsibilities
Design and deploy security controls (network segmentation, IAM, secrets management); Embed security into SDLC via SAST/DAST/SCA in CI/CD; Identify and remediate vulnerabilities in apps/APIs; Conduct penetration tests and threat modeling; Engineer SIEM/XDR detections and SOAR playbooks; Monitor logs and alerts to mitigate incidents; Harden Linux servers, Kubernetes, and WAF; Support incident response and forensics; Build internal security automation tools.
Seniority
Mid-to-Senior, hands-on IC