Job Expired

Remote Work Option:No

Requisition Number:166142

Date Opened:2021-05-26

Electronic Arts is an innovative tech company that creates incredible experiences for millions of gamers around the world. But what matters most is our people who inspire us, and the world, to play. As we bring new forms of entertainment to people around the world, we need innovative, collaborative, diverse and adaptable people to keep making Electronic Arts better.

***Junior* *Security Engineer***

EA Security

The EA Security team protects EA by reducing our exposure to security risks by raising awareness and providing a measured, proportionate set of security and risk management controls, services and solutions. This department also ensures that EA is meeting required security standards as defined by a variety of different regulatory bodies.

The Junior Security Engineer is a member of the Verification & Pentest (VAP) team under the Security Platform Engineering and Anti-Cheat Response (SPEAR) group within the EA Security department. You will report directly to the manager of the VAP team.

As a Junior Security Engineer, you will discover vulnerabilities in EA’s games and gaming infrastructure. Your work will help protect our data and most importantly, our customers.

The security assessments you perform will cover everything from web applications, to network infrastructure, to thick clients and servers. In addition to identifying security issues, you’ll need to determine the risk and business ramifications posed by the vulnerabilities you discover and explain your findings across teams.

You’ll bring an understanding of security principles and a passion to learn new technologies, challenge assumptions, and introduce new techniques.

Responsibilities:

Review architecture and design documentation to determine security test-cases for upcoming security assessments
Perform scoped static and dynamic application security assessments on EA products running on PC, web, mobile, and consoles with some assistance
Identify issue variants that defeat point fixes, and suggest solutions
Correctly rate the security impact of discovered vulnerabilities and articulate worst case scenario to product teams
Solve and explain technical issues to partner teams
Give talks and presentations within SPEAR
Inform product teams of discovered vulnerabilities to ensure remediation
Participate and contribute in conversations within VAP
Identify needs and develop your security knowledge

Qualifications

Experience with CWE Top 25 and OWASP Top 10 vulnerabilities and discovering these vulnerabilities in assessment targets.
Experience reviewing and understanding code in multiple programming languages, such as C, C++, Java, C#, golang, or scripting languages.
Knowledge of security assessment tools such as Burp Suite, Nessus, nmap, or Wireshark
Knowledge in at least one of the following domains: Networking, OS Internals, Cloud Architecture, Web Frameworks, or Mobile Architecture
Knowledge in at least one of: cryptography, authentication mechanisms, authorization controls and DevSecOps
Knowledge in at least one of the following exploitation techniques: XSS, SQLi, IDOR, MitM, DoS, BOF, or ROP
Knowledge of risk measurement frameworks, specifically CVSS
Experience presenting security issues, fixes and choices to all kinds of audiences.
Excellent verbal and written English skills, interpersonal skills, and professionalism
Bachelor’s degree in Computer Science or Information Security, or equivalent industry experience
Experience delivering talks in a professional environment

About EA At Electronic Arts, we exist to Inspire the World to Play. We create extraordinary new game experiences for our millions of players everywhere by bringing together talented people that combine creativity, innovation, and passion. We know that our strength lies in the diversity of our people. We immerse our employees into an inclusive culture, and provide opportunities for learning and leading that allow them to do the most impactful and rewarding work of their careers. We put our people first. We provide comprehensive benefit packages with a focus on health and wellbeing to support your needs and help you balance your career and personal life. We provide access to dynamic and collaborative work environments, opportunities to connect and contribute through our Employee Resource Groups, and support for a balanced life with paid time off and new parent leave, plus free video games and so much more! Electronic Arts is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. Electronic Arts also makes workplace accommodations for qualified individuals with disabilities as required by applicable law.