Application Security Analyst Ii (Remote)

Application Security Analyst Ii | Electronic Arts Inc. |Brazil

We are looking for an Application Security Analyst to help us activelydefend EA’s products, data, and players. This remote-friendly role willreport to the Senior Manager of the Verification and Pentest (VAP) teamwithin the Secure Product Engineering and Anti-cheat Response (SPEAR)organization. You will work with a diverse set of timezones working most...

Application Security Analyst Ii | Electronic Arts Inc. | Brazil

We are looking for an Application Security Analyst to help us actively defend EA’s products, data, and players. This remote-friendly role will report to the Senior Manager of the Verification and Pentest (VAP) team within the Secure Product Engineering and Anti-cheat Response (SPEAR) organization. You will work with a diverse set of timezones working most closely with an North American-based counterpart.

Responsibilities

You will triage and investigate cases reported through our Coordinated Vulnerability Disclosure (CVD) program and partner with developers to guide remediations
You will use your application security knowledge to identify proactive monitoring opportunities to detect future abuse across our applications
You will investigate daily alerts, search logs for Indicators of Compromise (IoCs) and create or enhance detections
You will identify systemic vulnerability trends and patterns, and engage EA security teams to prevent these at scale
You will correctly rate the security impact of discovered vulnerabilities, articulate remediation steps to product teams, and report impact to leadership
You will deliver talks and presentations within EA, including internal conferences

Qualifications

At least three years hands-on experience of full stack Application Security reviews that span multiple platforms and programming languages
Experience discovering and remediating CWE Top 25 and OWASP Top 10 vulnerabilities
Experience querying logs and setting up detections through a log aggregation platform, such as Grafana
Experience handling coordinated vulnerability disclosure programs
Hands-on experience with security assessment tools and understanding of their applicability and limitations in different assessment scenarios
Knowledge in multiple of the following domains and expertise in at least one: Networking, OS Internals, Cloud Architecture, Web Frameworks, or Mobile Architecture
Knowledge of best practices and common pitfalls in one or more of: cryptography, authentication mechanisms, authorization controls and network configurations
Knowledge of multiple of the following exploitation techniques and expertise in at least one: XSS, SQLi, IDOR, MitM, DoS, BOF, or ROP
Excellent verbal and written English skills
Bachelor’s degree or Master’s Degree in Computer Science or Information Security, or equivalent industry experience

Electronic Arts creates next-level entertainment experiences that inspire players and fans around the world. Here, everyone is part of the story. Part of a community that connects across the globe. A place where creativity thrives, new perspectives are invited, and ideas matter. A team where everyone makes play happen.

Tagged as: remote, remote job, virtual, Virtual Job, virtual position, Work at Home, work from home