Golang Job: Platform Security Engineer

Craft:

Job Description:

Role Description

At King, we strive to continuously evolve and modernise the products and services that power our games. We are now adopting a shift left security model, where security is a forefront consideration from the earliest point in the software development lifecycle. To ensure the success of this model, and to support additional security initiatives that will manage and reduce risk in how we create, ship and host our games and platform services, we are creating a new Platform Security team. The primary goal of this team is to ensure security best practices and awareness are at the centre of everything we do.

We are looking for an experienced Security Engineer who is passionate about all aspects of information security to join this new team focussed on delivering platform security features and tooling for our Cloud-hosted Game Platform. You will advocate for secure development practices and drive a program to deliver a secure software supply chain for King products. You will deliver tooling to ensure every artefact shipped is analysed, audited and secure and that the cloud hosting environments meet our exacting standards for security. As we move to a world where everything is secure by default, you will also ensure that operationally we are well positioned to react quickly to critical vulnerabilities and other threats to King assets, providing signals to our product development teams as necessary.

Responsibilities

• 
  Participate in the design and implementation of platform security features and tooling specific to King’s game and platform products
• Working with senior Platform Security engineers, define and implement a program for secure SDLC to drive higher levels of assurance, software provenance and secure software supply chain for development teams across King
• Act as an interface to 1st party app stores for all security audit activities including Data Processing Agreements (DPA)
• Liaise with the King Business Information Security Officer (BISO) to deliver the central Activision Blizzard King (ABK) Information Security team’s vulnerability management program and other initiatives for King assets
• Write comprehensive reports for King engineering leadership including all assessment-based findings, outcomes, and propositions for platform security enhancement

• Prepare and document standard operating procedures and protocols

Skills/Experience

• 
  Proven work experience as an information security engineer, or information security architect
• Good understanding of the latest security principles, frameworks, techniques, and protocols
• Good knowledge of Cloud Platforms like Google Cloud Platform, AWS, Azure
• Experience working with enterprise and open source security tools in the domain of Cloud Native Application Protection Platform (CNAPP)
• Hands-on experience in gitOps frameworks using tools like ArgoCD, Jenkins, GitHub, etc; and infrastructure as code such as Terraform
• Knowledge of containerization and containerization orchestration software, e.g. Docker, Kubernetes
• Proficiency in Python, Golang or other administrative programming languages and experience identifying and automating routine and manual tasks
• Ability to problem solve independently and collaborate as a team to solve complex problems in support of the Platform Security team’s mission

Pluses

• Professional experience in the games industry working with 1st party app stores and understanding their security and data protection requirements
• Experience working with frameworks to deliver a secure software supply chain for mobile and server side products

About King