About this role
Salary: £29,000 - 55,000 per year
Requirements: 3+ years of experience working in a professional, academic, or research environment identifying and remediating security bugs or flaws.Strong knowledge of the principles and techniques for both manual and automated application security assessments of desktop and web applications.Good knowledge of common web security vulnerabilities (e.g., OWASP Top 10), attack techniques, and remediation tactics or strategies.Good understanding of common low-level vulnerabilities (e.g., use-after-free and buffer overflows) and common mitigations.Good understanding of networking and web technologies (e.g., WebSockets, HTTPS, TCP/IP, UDP) and security controls relevant to them.Familiarity with Windows and Linux operating system fundamentals.Familiarity with the software development lifecycle (SDLC) and working knowledge of components to secure the SDLC.Practical experience with client network traffic testing tools and techniques, e.g., Burp Suite, Fiddler, and Bruno.Practical experience with thick client testing tools and techniques, e.g., Procmon, Strings2, and Dependencies.Proficiency in C#.Excellent communication skills. Responsibilities: Track trends in the security community and stay abreast of emerging threats.Provide technical security guidance to developers, team leads, and producers.Create and maintain threat models of applications and features to systematically understand how they can be attacked and prioritize control development.Conduct automated and manual security assessments of applications and services.Drive remediation efforts behind internally and publicly identified vulnerabilities.Support maintaining our public and private bug bounty programs. Technologies: C#FiddlerSupportJavaScriptLinuxNetworkOWASPSecurityTCP/IPTypeScriptWebWindows More:
We create world-class entertainment experiences and work on some of the most rewarding, large-scale creative projects in any entertainment medium. Our Application Security team partners with numerous development teams across the company to incorporate security practices throughout the software development lifecycle. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define secure development standards and guidelines that safeguard our business and protect our players. This is a full-time, permanent, in-office position based in our unique game development studio in the heart of Dundee, Scotland. We offer an inclusive, highly motivated environment where you can learn and collaborate with some of the most talented people in the industry. Desired extras include a BSc or MSc in a computer science or related field, background in reverse engineering and exploit research and development, scripting and process automation experience, familiarity with OAuth2 and OIDC, experience in a results-oriented retail-driven environment, familiarity with bug bounty or responsible disclosure programs, and proficiency in C++ and JavaScript or TypeScript. We are committed to creating a work environment that promotes equal opportunity, dignity, and respect, and we provide reasonable accommodations during the recruitment process for qualified applicants with disabilities.
last updated 36 week of 2026