Application Security Engineer
Application Security Engineer

Application Security Engineer

Full-Time 36000 - 60000 £ / year (est.) No home office possible
Rockstar

At a Glance

  • Tasks: Identify security flaws in software designs and collaborate with talented teams.
  • Company: Join Rockstar Games, a leader in world-class entertainment experiences.
  • Benefits: Competitive salary, inclusive culture, and opportunities for professional growth.
  • Why this job: Make a real impact on security in the gaming industry while working on exciting projects.
  • Qualifications: 3+ years in application security with strong knowledge of vulnerabilities and remediation.
  • Other info: Dynamic studio environment in Dundee with excellent career advancement opportunities.

The predicted salary is between 36000 - 60000 £ per year.

At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Application Security Engineer who possesses a passion for diving into complex software designs to identify security flaws and vulnerabilities. This is a full-time, permanent and in-office position based in Rockstar’s unique game development studio in the heart of Dundee, Scotland.

WHAT WE DO

The Rockstar Games Application Security team partners with numerous development teams across the company to incorporate security practices throughout the software development lifecycle. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define secure development standards and guidelines to safeguard our business and protect our players. We independently assess our application code and builds through various techniques (static analysis, dynamic analysis, software composition analysis, etc.) to identify potential vulnerabilities and design flaws and work with development teams to remediate.

RESPONSIBILITIES

  • Track trends in the security community and stay abreast of emerging threats.
  • Provide technical security guidance to developers, team leads and producers.
  • Create and maintain threat models of applications and features to systematically understand how they can be attacked to prioritize control development.
  • Conduct automated and manual security assessments of applications and services.
  • Drive remediation efforts behind internally and publicly identified vulnerabilities.
  • Support maintaining Rockstar Games’ public and private bug bounty programs.

REQUIREMENTS

  • 3+ years of experience working in a professional, academic or research environment identifying and remediating security bugs/flaws.
  • Strong knowledge of the principles and techniques for both manual and automated application security assessments of desktop and web applications.
  • Good knowledge of common web security vulnerabilities (e.g., OWASP Top 10), attack techniques and remediation tactics/strategies.
  • Good understanding of common low-level vulnerabilities (e.g. use-after-free and buffer overflows) and common mitigations.
  • Good understanding of networking and web technologies (e.g. WebSockets, HTTPS, TCP/IP, UDP) and security controls relevant to them.
  • Familiarity with Windows and Linux operating systems fundamentals.
  • Familiarity with the software development lifecycle (SDLC) and working knowledge of components to secure the SLDC.
  • Practical experience with client network traffic testing tools and techniques e.g., Burp Suite, Fiddler and Bruno.
  • Proficiency in C#.
  • Excellent communication skills.

PLUSES

Please note that these are desirable skills and are not required to apply for the position.

  • BSc/MSc in a computer science or related field.
  • Background in reverse engineering and exploit research.

Application Security Engineer employer: Rockstar

At Rockstar Games, we pride ourselves on fostering a dynamic and inclusive work culture that encourages creativity and collaboration among our talented team members. As an Application Security Engineer in our Dundee studio, you'll not only have the opportunity to work on cutting-edge projects but also benefit from continuous learning and professional growth in a supportive environment. With a focus on security excellence and a commitment to safeguarding our players, you'll be part of a mission-driven team that values innovation and teamwork.
Rockstar

Contact Detail:

Rockstar Recruiting Team

StudySmarter Expert Advice 🤫

We think this is how you could land Application Security Engineer

✨Tip Number 1

Network, network, network! Get out there and connect with folks in the gaming and security industries. Attend meetups, conferences, or even online webinars. You never know who might have a lead on your dream job at Rockstar!

✨Tip Number 2

Show off your skills! Create a portfolio showcasing your work in application security. Include any projects where you've identified vulnerabilities or contributed to secure coding practices. This will give you an edge when chatting with potential employers.

✨Tip Number 3

Prepare for interviews by brushing up on common security vulnerabilities and attack techniques. Be ready to discuss how you've tackled these issues in the past. Rockstar loves candidates who can demonstrate their problem-solving skills in real-world scenarios.

✨Tip Number 4

Don't forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, it shows you're genuinely interested in joining the Rockstar team. Let's get you that Application Security Engineer role!

We think you need these skills to ace Application Security Engineer

Application Security Assessments
Threat Modelling
Vulnerability Remediation
Web Security Vulnerabilities (OWASP Top 10)
Networking Technologies (WebSockets, HTTPS, TCP/IP, UDP)
Windows and Linux Operating Systems
Software Development Lifecycle (SDLC)
Client Network Traffic Testing Tools (Burp Suite, Fiddler, Bruno)
C# Proficiency
Communication Skills
Analytical Skills
Problem-Solving Skills
Technical Security Guidance

Some tips for your application 🫡

Tailor Your CV: Make sure your CV is tailored to the Application Security Engineer role. Highlight your experience with security assessments and any relevant projects you've worked on. We want to see how your skills align with what we do at Rockstar!

Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Share your passion for application security and why you’re excited about working at Rockstar. Let us know how you can contribute to our team and the gaming industry.

Showcase Your Skills: Don’t hold back on showcasing your technical skills! Mention specific tools and techniques you’ve used in your previous roles, especially those related to manual and automated security assessments. We love seeing practical experience!

Apply Through Our Website: We encourage you to apply through our website for the best chance of getting noticed. It’s super easy, and you’ll be able to submit all your materials in one go. Plus, it helps us keep track of your application!

How to prepare for a job interview at Rockstar

✨Know Your Security Fundamentals

Make sure you brush up on your knowledge of common web security vulnerabilities, especially the OWASP Top 10. Be ready to discuss how you've identified and remediated these issues in past roles, as this will show your practical experience and understanding of application security.

✨Familiarise Yourself with the SDLC

Since the role involves working within the software development lifecycle, it’s crucial to understand how security fits into each phase. Prepare examples of how you've integrated security practices into development processes in previous jobs, as this will demonstrate your proactive approach.

✨Show Off Your Technical Skills

Be prepared to talk about your experience with tools like Burp Suite and Fiddler. If you can, bring along examples of your work or even a mini demo to showcase your skills in action. This hands-on approach can really set you apart from other candidates.

✨Stay Updated on Emerging Threats

The security landscape is always changing, so make sure you’re up-to-date with the latest trends and threats. Mention any recent developments you’ve followed and how they might impact the gaming industry. This shows your passion for the field and your commitment to continuous learning.

Application Security Engineer
Rockstar

Land your dream job quicker with Premium

You’re marked as a top applicant with our partner companies
Individual CV and cover letter feedback including tailoring to specific job roles
Be among the first applications for new jobs with our AI application
1:1 support and career advice from our career coaches
Go Premium

Money-back if you don't land a job in 6-months

>