Senior Software Engineer, Application Security
Security Austin, Texas

We are looking for a talented and motivated Senior Software Engineer specializing in Application Security to join its ranks in Austin, TX.

If this is you, you are a Software Engineer with a deep passion for security. This person should have experience with a variety of systems, languages, tools and architectures.

About Our Team

The Security Development (SecDev) organization owns all security-related software development efforts across Blizzard. We are a mix of hardcore software engineers, server developers and security-minded individuals who work together to ensure that our company and players are safe from Evil.

We work with all games and software platforms produced by Blizzard, so we get exposed to a mind-boggling array of technologies – not only security technologies, but graphic engines, machine learning systems, web servers, databases etc. It’s an incredible place for passionate software developers to get acquainted with all aspects of developing world class videogames.

You will be part of SecDev’s Application Security team. You will embed yourself in one or more of Blizzard’s teams to help them build secure software. Not only you will help find and fix existing vulnerabilities, but also actively participate on preventing new vulnerabilities from being introduced. You will also have the opportunity to work with elite software engineers to solve specific hard security problems, “tiger team” style.

Responsibilities

  • Perform security reviews and provide insights throughout all phases of software development with our partner teams.
  • Develop and enhance new and existing security-focused tools, systems and services.
  • Evaluate the impact to the organization of current security advisories, publications, and trends.
  • Develop new security solutions/tools to prevent security vulnerabilities and assist in addressing existing security problems.
  • Help detect, highlight, and close security vulnerabilities that surface during the software development lifecycle.

Requirements

  • Bachelor’s Degree in Computer Science or equivalent experience.
  • A minimum of 5 years experience in secure Web Application development.
  • Expert knowledge of security problems associated with modern web languages and frameworks, including but not limited to Javascript (front and backend), Java and C#.
  • Knowledge of penetration testing techniques, application security vulnerabilities, OWASP Top 10, SANS 25, CWE, and whitebox exploitation via Burpsuite/Fiddler or similar.
  • Excellent ability to discover and demonstrate flaws such as SQL injection, XSS, and CSRF.
  • Solid understanding of database (SQL, noSQL) security.
  • Knowledge of encryption theory and practice (e.g. TLS, HMAC, RSA, AES, PKI) .
  • Be able to adapt and be entrepreneurial and solve problems quickly, creatively, and collaboratively.

Pluses

  • Aptitude for doing threat modeling on complex systems.
  • Experience in Mobile software development and security.
  • Experience with application security testing tools (static and dynamic code analyzers, fuzzing tools).
  • Enjoys tasty beverages – we work hard and play hard.

Blizzard Entertainment is a global company committed to growing our employees along with the business. We offer generous benefits and perks with an eye on providing true work / life balance. We’ve worked hard to foster an intensely collaborative and creative environment, a diverse and inclusive employee culture, and training and opportunity for professional growth. Our people are everything. Our core values are real, and our mission has never changed. We are dedicated to creating the most epic entertainment experiences…ever. Join us!

COMPARTILHE: 

A Blizzard Entertainment é um empregador em favor oportunidades iguais. Assim sendo, é nossa política preencher vagas com candidatos qualificados, independente da raça, cor, sexo, idade, religião, ascendência, nação de origem, status de cidadania, estado civil, orientação sexual, identidade de gênero, informação genética, deficiência, gravidez, status militar, de veterano ou qualquer outro grupo com o qual o mesmo ou mesma se identifique.

Pedidos de acomodação: Nós nos comprometemos a prover assistências cabíveis e a trabalhar com indivíduos com necessidades especiais, físicas e/ou mentais. Caso tenha necessidades especiais e deseje solicitar uma acomodação para se candidatar a uma vaga aberta, envie sua solicitação por email para talentacquisition@blizzard.com. Questionamentos gerais sobre a vaga não serão considerados nem processados nesse contato. Agradecemos o interesse.

Aviso a recrutadores e agências de vagas: não aceitamos currículos que não tenham sido solicitados. Não enviem currículos pelo nosso site nem por nenhum dos nossos funcionários. Não pagaremos taxas a nenhuma agência, firma ou recrutador terceirizado sem um contrato de mútuo acordo assinado e nem nos responsabilizamos por taxas de agência relacionadas a currículos não solicitados. Os currículos que não tenham sido solicitados serão considerados de nossa propriedade e serão processados de acordo com as nossas normas.