Offensive Security Engineer

Description & Requirements
Electronic Arts creates next-level entertainment experiences that inspire players and fans around the world. Here, everyone is part of the story. Part of a community that connects across the globe. A place where creativity thrives, new perspectives are invited, and ideas matter. A team where everyone makes play happen.

Offensive Security Engineer – Enterprise Red Team

EA Security
The EA Security team protects EA by reducing our exposure to security risks by raising awareness and providing a measured, proportionate set of security and risk management controls, services and solutions.

EA is looking for a security engineer to join EA's Enterprise Red Team. You will help us identify threat vectors before they can be exploited in our systems, services, cloud infrastructure or applications. We're a team that can find the worst of the worst, knows what's most likely to be attractive to attackers, and we're motivated to make things better.

You will report to the Enterprise Red Team Director to work on an offensive security-driven application security program that scales enterprise-wide with a focus on automation, exploitation and best-practices.

What You'll Do

• Be part of the offense Find and exploit security vulnerabilities for defensive purposes to help identify risks and lead mitigations
• Perform architecture and threat model reviews to identify security vulnerabilities with a focus on AI applications, agents, and infrastructure
• Build automation to scale penetration testing and to test threat detection and response capabilities
• Develop, pilot and operate flexible and creative security testing automation
• Collaborate with engineers across EA to identify automation gaps and rapid prototyping of new ideas and mitigations
• Support traditional red team assessments, adversarial emulation campaigns and penetration tests of EA's systems to discover and document high risk vulnerabilities
• Support incident response activities as required

What You'll Need

• 4+ years' experience in penetration testing and/or red team operations
• 2+ years programming experience in at least one of the following: Golang, Python, Java, C#, C/C++
• Working knowledge of DevSecOps and CI/CD pipelines and related tooling (Gitlab, Github, Jenkins,…)
• Application Analysis (fuzzing, static analysis, app scanning)
• Familiarity with reviewing source code for security vulnerabilities and related tooling (Code QL, semgrep,…)
• Basic understanding of machine learning its attack surface
• Advanced knowledge in application security, network security, authentication protocols
• Proficiency in one or more operating systems: Linux, Windows, macOS
• Experience with tooling such as Metasploit, Bloodhound, Burp, PromptFoo, ZAP, Sliver,…
• Web and Database Penetration Testing Experience

About Electronic Arts
We're proud to have an extensive portfolio of games and experiences, locations around the world, and opportunities across EA. We value adaptability, resilience, creativity, and curiosity. From leadership that brings out your potential, to creating space for learning and experimenting, we empower you to do great work and pursue opportunities for growth.

We adopt a holistic approach to our benefits programs, emphasizing physical, emotional, financial, career, and community wellness to support a balanced life. Our packages are tailored to meet local needs and may include healthcare coverage, mental well-being support, retirement savings, paid time off, family leaves, complimentary games, and more. We nurture environments where our teams can always bring their best to what they do.

Electronic Arts is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. We will also consider employment qualified applicants with criminal records in accordance with applicable law. EA also makes workplace accommodations for qualified individuals with disabilities as required by applicable law.