Scopely is looking for a Principal Security Engineer to join our Information Security team in Spain/Portugal on a hybrid basis.
Our security team is dedicated to ensuring the security of our top games. This involves collaborating closely with game studios to develop and implement comprehensive security strategies throughout the game design and development lifecycle.
In addition, this role will drive the application of AI to transform how security is delivered across Product Security, Security Operations, and Security Engineering , improving efficiency, scalability, and impact.
Game & Product Security Leadership
Partner with game studios to develop comprehensive security strategies for game design and development
Conduct threat modeling, vulnerability assessments, and security audits across all phases of game development
Design and implement security controls and countermeasures to mitigate risks and ensure compliance with company policies, standards, and industry norms
Collaborate with game teams to advocate for secure coding practices and integrate security at every level of the software development lifecycle
Coordinate and participate in penetration tests and game feature security assessments
Provide expert-level technical guidance to game teams to assist in securing games and backend infrastructure
Security operations workflows (alert analysis, investigation, response)
Product security processes (code analysis, findings analysis, pentesting support)
Use AI to improve vulnerability management through triage support, risk classification, remediation guidance, and findings analysis
Partner with Security Operations to improve detection, triage, investigation and response through automation and AI-assisted analysis
Wiz, SIEM, Jira, IAM systems)
Establish practical guardrails for the safe and effective use of AI in security, including data handling, quality control, and human review




Define success metrics for AI-enabled workflows, including productivity gains, response times, remediation throughput, and signal quality
Security Engineering & Platform Enablement
Design and implement scalable security solutions across cloud and backend systems
Work closely with information security domain owners to ensure games adhere to all relevant security policies, standards, and regulatory requirements
Improve security engineering efficiency through automation and tooling
Frequently interact with game studio leaders to understand their roadmaps, risk posture, and how information security can enable them to execute their vision securely
Develop security-related roadmaps in partnership with game teams
Regularly report to Information Security and Studio management on the threat landscape and security posture of games
8+ years of experience in Product Security, software development, or cybersecurity
~ Proven track record in securing large-scale software applications and systems
~ Expertise in modern programming languages such as Python and C#
Vulnerability management and pentesting methodologies
API and backend security
Experience with mobile application penetration testing, including traffic interception, runtime analysis and API security.
Strong, hands‑on experience with cloud computing environments including:
AWS shared responsibility model
IAM and access control
Network security in the cloud
Strong understanding of securing cloud workloads including configuration, deployment, and auditing
Deep knowledge of Linux security practices
Experience architecting for and managing high‑scale, high‑velocity workloads in AWS preferred
OWASP, NIST Cybersecurity Framework) and compliance regulations (e.g., Previous experience at a game company
AI‑assisted code analysis or pentesting
We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state, and local law.
#

📌 Principal AI Product Security Engineer ES - Barcelona, Spain; ES - Spain; PT - Portugal
🏢 Scopely
📍 Barcelona