Director Engineering, Application Security & Red Teaming

Electronic Arts•Orlando, FL

15h•Hybrid

About The Position

Electronic Arts is seeking a highly technical leader to direct its Red Team and help establish an enterprise-wide application security program focused on automation and best practices. The role protects EA’s people, products, platforms, and systems by identifying major security threats and helping teams strengthen defenses across the company’s global operations. The director contributes to enterprise security strategy and works with leaders across Security, IT, production, and studios, as well as with partners across the gaming industry. The role reports to the Vice President of the Enterprise Security Team. It partners extensively with vulnerability management, incident response, threat hunting, and security operations teams. The director leads red-team and penetration-testing work, supports response to targeted attacks, and helps coordinate incident resolution. The role also communicates findings and mission status to security and studio leaders, develops remediation strategies, and mentors junior staff.

Requirements

Demonstrated ability to lead and attract high-caliber technical talent.
Proven ability to build relationships across the business and drive change through those relationships.
Strong interpersonal skills and ability to tailor engagements to different businesses and leaders.
Experience building and delivering security programs from the ground up.
Ability to plan quarterly roadmaps, make trade-offs, communicate decisions, manage work, and establish reporting and business rhythms.
Experience building and deploying flexible automation frameworks.
Strong experience or knowledge in at least three of the following areas, and knowledge of the remaining areas: security tools such as Cobalt Strike, Burp, and BloodHound; web penetration testing; database hosting and configuration; networks and traffic analysis; operating systems and configuration; development, coding, scripting, SQL, computer architecture, exploit writing, and code analysis; application analysis, fuzzing, reverse engineering, and disassembly; cryptography, password cracking, encryption, and algorithm analysis.

Responsibilities

Respond to emerging threats, including advanced persistent threats, targeted attacks, and organized crime.
Plan and conduct attacks against internally or externally hosted applications and infrastructure globally, emphasizing critical functions targeted by adversaries.
Design and develop scripts, frameworks, tools, and methods for application security assessments.
Participate in attack analysis as part of security incident response to track current adversary tactics, techniques, and procedures.
Coordinate with incident response operations and other EA teams to resolve security incidents efficiently.
Communicate the status of missions and Red Team activities to EA Security and studio leadership.
Manage findings and review attack-campaign results to assess severity and identify remediation or mitigation strategies.
Stay current on attack techniques and published and emerging real-world attack scenarios.
Mentor and train junior staff in attack techniques, tool and exploit development, intelligence analysis, and adversarial tactics.
Communicate effectively with business representatives, technology specialists, and vendors.
Build relationships across the business and use them to drive change.
Build and deliver security programs from the ground up.
Plan quarterly roadmaps, make and communicate trade-offs, manage work, and establish reporting and business rhythms.
Build and deploy flexible automation frameworks.
Attract and develop high-caliber technical talent.