ph3Описание /h3pScopely is a integral video game and interactive entertainment company that creates, develops, publishes, and live-operates games across mobile, web, PC, and console. Its portfolio includes MONOPOLY GO!, Pokémon GO, Stumble Guys, Star Trek™ Fleet Command, MARVEL Strike Force, and other games, supported by the proprietary Playgami technology platform. /ph3Задачи /h3ulliPartner with game studios to develop comprehensive security strategies for game design and development; /liliConduct threat modeling, vulnerability assessments, and security audits across all phases of game development; /liliDesign and implement security controls and countermeasures to mitigate risks and ensure compliance with company policies, standards, and industry norms; /liliCollaborate with game teams to advocate for secure coding practices and integrate security throughout the software development lifecycle; /liliCoordinate and participate in penetration tests and game feature security assessments; /liliProvide expert-level technical guidance to game teams securing games and backend infrastructure; /liliTranslate business priorities, technical constraints, and threat intelligence into actionable security roadmaps; /liliIdentify and implement AI opportunities for vulnerability management, security operations, and product security processes; /liliBuild AI-driven workflows, tools, and agents to reduce manual effort and improve speed and accuracy; /liliUse AI to support vulnerability triage, risk classification, remediation guidance, and findings analysis; /liliPartner with Security Operations to improve detection, triage, investigation, and response through automation and AI-assisted analysis; /liliIntegrate AI capabilities into security platforms such as Wiz, SIEM, Jira,



and IAM systems; /liliDevelop reusable AI-enabled components that scale across teams and studios; /liliEstablish guardrails for safe and effective AI use in security, including data handling, quality control, and human review; /liliDefine success metrics for AI-enabled workflows, including productivity gains, response times, remediation throughput, and signal quality; /liliDesign and implement scalable security solutions across cloud and backend systems; /liliWork with information security domain owners to ensure games follow relevant security policies, standards, and regulatory requirements; /liliDevelop and maintain documentation on security architectures, processes, and decisions for technical and non-technical stakeholders; /liliImprove security engineering efficiency through automation and tooling; /liliStay updated on security technologies, trends, threats, and AI capabilities; /liliInteract with game studio leaders to understand roadmaps, risk posture, and how information security can support secure execution; /liliDevelop security-related roadmaps with game teams; /liliReport to Information Security and Studio management on the threat landscape and security posture of games; /liliAct as a thought leader using qualitative and quantitative risk assessment frameworks; /liliLead or assist with security incidents and investigations. /li /ulh3Требования /h3ulli8+ Years of experience in Product Security, software development,



or cybersecurity; /liliProven experience securing large-scale software applications and systems; /liliStrong experience building automation and security tooling; /liliHands-on experience applying AI/LLMs to operational workflows, including designing, evaluating, and safely deploying AI-assisted systems; /liliAbility to communicate business risk and technical information clearly to technical and non-technical audiences; /liliExpert knowledge of modern programming languages such as Python and C#; /liliStrong understanding of application and product security, vulnerability management, and penetration testing methodologies; /liliStrong understanding of API and backend security; /liliExperience with mobile application penetration testing, including traffic interception, runtime analysis, and API security; /liliExperience with modern development ecosystems, CI/CD pipelines, APIs, and developer platforms; /liliHands-on experience with AWS shared responsibility, IAM, access control, and cloud network security; /liliStrong understanding of securing cloud workloads through configuration, deployment, and auditing; /liliDeep knowledge of Linux security practices; /liliAbility to think like both an attacker and defender; /liliExcellent analytical, problem-solving, and decision-making skills; /liliExceptional communication and leadership skills with the ability to influence across teams; /liliNice to have: Experience architecting and managing high-scale, high-velocity workloads in AWS, familiarity with OWASP, NIST Cybersecurity Framework, GDPR, CCPA, and ISO 27001, experience at a game company, experience applying AI to security, automation, or developer workflows, familiarity with RAG architectures, vector databases such as pgvector, and AI-assisted code analysis or pentesting. /li /ulh3Условия /h3pHybrid role based in Barcelona, Catalonia, Spain, with the security team covering Spain and Portugal; No conditions specified. /p /p #J-18808-Ljbffr

📌 appsec engineer (Barcelona)
🏢 Enfint
📍 Barcelona