Senior Security Engineer

Riot Security Engineers and Analysts hold an in-depth knowledge of specific areas of expertise. We don't just focus on breaking things; we aggressively support teams across Riot to develop robust security capabilities which help protect player experiences. We relish the opportunity to work with new tech stacks and product teams, each with their own particular security risk profile and complex challenges.

At the most fundamental level, our goal is to help deliver value to players and make life harder for troublemakers.

As a Product Security Engineer, you will work closely with product teams globally to help build fun, safe and secure experiences for players. You will identify product security gaps and own projects to address them. Your deep knowledge of both the technical detail and player impact of security vulnerabilities will help you communicate potential issues to Rioters and improve the security of the player experience.

Responsibilities:

• Build projects that contribute towards Product Security’s long-term goals
• Manage and improve a corporate Vulnerability Management program.
• Define security test strategies for complex systems, identifying security vulnerabilities
• Develop relationships with engineering teams to understand their Product Security needs
• Develop powerful security tools and automation systems
• Educate and integrate security in a non-blocking way throughout the development cycle
• Help level up our bug bounty program and provide researchers with an elite bug bounty experience
• Review code and hunt for security vulnerabilities before we release products to players
• Champion Product Security initiatives to product leads and engineers
• You may (circumstances allowing) visit our LAX office approximately two to three times a year for around three to four weeks in total

Required Qualifications:

• 3-5 years of experience in an application/product security role
• Experience implementing and running a Vulnerability Management program
• Programming experience in C#, C++, Java, JavaScript, Golang or Python
• You’ve built systems in the cloud and kept and online production environment secure and stable
• You have experience security infrastructure in AWS, GCP or other clouds (Azure, Softlayer or private clouds)
• Experience using web application security testing tools such as Burp Suite and OWASP ZAP
• Experience implementing, tuning and helping software teams understand the output from static analysis tools
• As comfortable communicating in distributed teams as with people sitting right next to you

Desired Qualifications:

• Experience implementing, tuning and helping software teams understand the output from static analysis tools
• Codifying and deploying infrastructure with Terraform / Terragrunt / Jenkins / Chef / Ansible
• Development of custom security automation tooling 
• Experience with Container Security
• Security testing of infrastructure and driving the resolution of issues found

For this role, you'll find success through craft expertise, a collaborative spirit, and decision-making that prioritizes your fellow Rioters, who are the customers of your work. Being a dedicated fan of games is not necessary for this position!

Our Perks:

• Open paid time off
• Retirement benefits with company matching
• Medical and dental plans that cover you, your spouse/domestic partner, and children
• Life insurance, short-term and long-term disability
• Family bonding leave
• Commuting allowance
• Flexible benefits allowance
• Vision allowance
• Daily lunch, snacks and fruit in the office
• We will double down on your donations of time and money to nonprofits

Riot Games fosters a player and workplace experience that values teamwork embodied by the Summoner's Code and Community Code. Our culture embraces differences as a strength, and our values are the guiding principles for how we approach work. We are committed to putting diversity and inclusion (D&I) at the center of everything we do and promoting a fair and collaborative culture where Rioters treat one another with dignity and respect. We encourage you to read more about our value of thriving together and our ongoing work to build the most inclusive company in Gaming.

Let's Thrive Together:

Because together we are better

It's our policy to provide equal employment opportunities for all applicants and members of Riot Games. Riot Games makes reasonable accommodations for individuals with a disability and does not unlawfully discriminate  on the basis of race, color, citizenship status, national origin, ancestry, sex, sex stereotyping, pregnancy, medical condition, political affiliation or activity, genetic information, religion, trade union membership or activity, age, sexual orientation, family status, gender, gender identity, gender expression, marital or civil status, disability, veteran status or any other legally protected status or characteristics. We interpret these protected statuses broadly to include both the actual status and also any perceptions and assumptions made regarding these statuses. We know that fresh and varied perspectives will make us better at what we do, so however you identify and whatever background you bring with you, we’re excited to hear from you. Don’t be discouraged if you feel you don’t fully meet every single one of the requirements for a particular role, there’s always room for growth at Riot. If you spot a role that will make you want to jump out of bed in the morning, we are waiting to hear from you!

If you need assistance or an accommodation for this process due to a disability, please let us know.