Director Engineering, Application Security & Red Teaming

Electronic Arts is seeking a highly technical leader to direct enterprise application security and Red Team activities. In this hybrid role based in Orlando, Florida, you will lead EA’s Red Team in identifying major security threats, scaling an automation-driven application security program, and supporting coordinated incident resolution across the security organization. The position reports into the Vice President of the Enterprise Security Team.

Role focus

• Lead the EA Red Team in finding the biggest threats to EA’s security
• Drive classic Red Team activities alongside application security program building with automation and best practices
• Partner with vulnerability management, incident response, threat hunting, and security operations teams
• Coordinate with security leadership and studio leadership by communicating the status of missions and Red Team activities

Responsibilities

• Respond to emerging threats including APT and other forms of targeted attacks and organised crime
• Plan and conduct attacks on internally or externally hosted applications and infrastructure at global scale, with emphasis on critical functions targeted by adversaries
• Design and develop scripts, frameworks, tools, and methods to facilitate and execute application security assessments
• Participate in attack analysis as part of security incident response to stay current on adversary TTPs
• Assemble and coordinate with IR Ops and other EA teams to resolve security incidents quickly and efficiently
• Ensure knowledge management of findings and review results of attack campaigns to determine severity and identify remediation or mitigation strategies
• Stay current on attack techniques and understand published and emerging real-life attack scenarios
• Mentor and train more junior staff in attack techniques, tool and exploit development, intelligence analysis, and adversarial tactics
• Communicate effectively with representatives of Lines of Business, technology specialists, and vendors

Required background

• Demonstrated ability to lead and attract high-caliber technical talent
• Proven track record building relationships across the business and driving change through those relationships
• Strong interpersonal skills and experience tailoring engagements for different types of businesses and leaders
• Experience building and delivering successful security programs from the ground up
• Capability to plan quarterly roadmaps, make difficult trade-offs, communicate them clearly, and manage reporting and business rhythm
• Experience building and deploying flexible automation frameworks
• Strong experience and knowledge in at least 3 of the following (plus working knowledge of the remainder):
  • Tools similar to Cobalt Strike, BURP, Bloodhound
  • Web Penetration Testing (injection, XSS, validation, session management, web services, etc.)
  • Database (Oracle, MSSQL, MySQL: hosting, configuration, etc.)
  • Network (protocols, traffic analysis, wireless, etc.)
  • Operating System (UNIX, Solaris, Linux, Mac, Windows: configuration, file system, etc.)
  • Development (coding, scripting, SQL, computer architecture, exploit writing, code analysis)
  • Application Analysis (fuzzing, reverse engineering, disassembling such as IDA and OllyDbg)
  • Crypto (password cracking, encryption, algorithm analysis)

Technology exposure

• Cobalt Strike, BURP, Bloodhound
• IDA, OllyDbg
• Oracle, MSSQL, MySQL
• UNIX, Solaris, Linux, Mac, Windows
• SQL

Location: Orlando, Florida, United States of America (Hybrid). Minimum experience: 3 years. Worker Type: Regular Employee. Studio/Department: CT - Security. Role ID: 216590.