Application Security Engineer

Responsibilities

• Track trends in the security community and stay abreast of emerging threats
• Provide technical security guidance to developers, team leads and producers
• Create and maintain threat models of applications and features
• Conduct automated and manual security assessments of applications and services
• Drive remediation efforts behind internally and publicly identified vulnerabilities
• Support maintaining Rockstar Games’ public and private bug bounty programs

Requirements

• 3+ years of experience identifying and remediating security bugs/flaws
• Strong knowledge of manual and automated application security assessments
• Good knowledge of OWASP Top 10 and attack techniques
• Understanding of low-level vulnerabilities like use-after-free and buffer overflows
• Understanding of networking and web technologies (WebSockets, HTTPS, TCP/IP, UDP)
• Familiarity with Windows and Linux operating systems
• Familiarity with the software development lifecycle (SDLC)
• Practical experience with Burp Suite, Fiddler, or Bruno
• Proficiency in C#

Preferred Qualifications

• BSc/MSc in Computer Science or a related field
• Background in reverse engineering and exploit research (Ghidra, IDA, x64dbg, WinDbg)
• Experience with scripting and process automation
• Experience with OAuth2 and OIDC
• Proficiency in C++ and JavaScript/TypeScript

About the Company

Rockstar Games creates world-class entertainment experiences, working on some of the most rewarding, large-scale creative projects in the industry.