Application Security Analyst

The Senior AppSec Analyst at Electronic Arts will join the EA Security team, focusing on protecting players, EA's work, games, data, and infrastructure. This hybrid role in Bucharest involves leading application security investigations across various platforms (web, mobile, console, PC), identifying and remediating vulnerabilities, and contributing to incident response. The analyst will also drive security automation, SOAR workflows, and AI-driven detection proof-of-concepts, partnering with product and studio teams to enhance EA's security ecosystem.

Must Have

• 5+ years of hands-on application security assessment experience.
• Ability to identify and remediate common vulnerabilities (CWE Top 25, OWASP Top 10).
• Proficiency in querying logs and building detections using platforms like Splunk, Loki Grafana, or DataDog.
• Experience developing security automation or SOAR workflows.
• Expertise in at least one technical domain (e.g., cloud architecture, networking, web frameworks, mobile architecture) and associated exploitation techniques.

Perks & Benefits

• Healthcare coverage
• Mental well-being support
• Retirement savings
• Paid time off
• Family leaves
• Complimentary games
• Opportunities for growth

General Information

Locations: Bucharest, Romania

Role ID

212076

Worker Type

Regular Employee

Studio/Department

CT - Security

Work Model

Hybrid

Description & Requirements

Electronic Arts creates next-level entertainment experiences that inspire players and fans around the world. Here, everyone is part of the story. Part of a community that connects across the globe. A place where creativity thrives, new perspectives are invited, and ideas matter. A team where everyone makes play happen.

Central Technology is a dynamic community of experts, innovators, and change-makers united by a single, shared vision: To revolutionize interactive entertainment and inspire creativity through transformative technology. Our industry-leading services and solutions are developed collaboratively with teams across EA to enhance creativity and improve outcomes for our partners and players.

Central Technology is a force multiplier, working at the intersection of creativity, technology, and play to power our enterprise. Our teams develop EA's proprietary game engine, drive cutting-edge research, manage innovative infrastructures, create safety and security, and transform data into inspiration. Together, we keep EA moving so it can do what it does best — build unforgettable experiences for people who love games.

The EA Security team makes sure that play is fair and protected, so it stays fun and exciting. We defend not only our players, but EA itself: our people's work, our games, our data, and our infrastructure. Powered by deep technical expertise, we use cutting-edge engineering, automation, and intelligence to tackle threats at global scale. Whether it's securing game services, combating fraud, or supporting fair play, we're at the frontline of protecting the future of interactive entertainment. Join us and help keep the world of play — and EA — secure.

The Senior AppSec Analyst will report to the Senior Manager of the Verification & Pentest team. This is a hybrid role, reporting to the EA office in Bucharest 3x per week.

Responsibilities

• You search and analyze logs for Indicators of Compromise, create detections, and contribute to incident response investigations.
• You lead and conduct application security investigations across EA products (web, mobile, console, and PC), including static/dynamic testing and architectural review to identify vulnerabilities and validate bad actor activity.
• You partner with product, studio, and security teams to remediate vulnerabilities, providing clear technical guidance.
• You identify systemic vulnerability trends and lead scalable improvements across EA's security ecosystem, including sharing insights through internal presentations and research reviews.
• You own security automation and SOAR workflows (primarily in Splunk), build integrations for diverse data sources, and lead AI-driven detection proof-of-concepts.

Requirements

• You have 5+ years of hands-on application security assessment experience across multiple platforms or programming languages.
• You can identify and remediate common vulnerabilities (e.g., CWE Top 25, OWASP Top 10) using manual analysis and security tools.
• You are proficient in querying logs and building detections using platforms such as Splunk, Loki Grafana, or DataDog.
• You have experience developing security automation or SOAR workflows, including data-source integrations and prototype automation or AI-based detection logic.
• You bring expertise in at least one technical domain (e.g., cloud architecture, networking, web frameworks, mobile architecture) and associated exploitation techniques (e.g., injection, IDOR, misconfigurations).

About Electronic Arts

We’re proud to have an extensive portfolio of games and experiences, locations around the world, and opportunities across EA. We value adaptability, resilience, creativity, and curiosity. From leadership that brings out your potential, to creating space for learning and experimenting, we empower you to do great work and pursue opportunities for growth.

We adopt a holistic approach to our benefits programs, emphasizing physical, emotional, financial, career, and community wellness to support a balanced life. Our packages are tailored to meet local needs and may include healthcare coverage, mental well-being support, retirement savings, paid time off, family leaves, complimentary games, and more. We nurture environments where our teams can always bring their best to what they do.

Electronic Arts is an equal opportunity employer. All employment decisions are made without regard to race, color, national origin, ancestry, sex, gender, gender identity or expression, sexual orientation, age, genetic information, religion, disability, medical condition, pregnancy, marital status, family status, veteran status, or any other characteristic protected by law. We will also consider employment qualified applicants with criminal records in accordance with applicable law. EA also makes workplace accommodations for qualified individuals with disabilities as required by applicable law.