Senior Application Security Engineer

Overview

Bethesda Softworks is looking for a world class Senior Application Security Engineer to join a highly skilled team of senior security professionals responsible for security of AAA titles, digital platforms, and data in live and studio development environments. The ideal candidate has a proven record of developing, testing, and reviewing security measures within products at a source code level.  Prior game development experience and an ability to understand the unique challenges facing the industry is a definite bonus.

Responsibilities

• Read, write and identify issues with source code in languages such as, C++, C#, Java, GoLang, Python, JavaScript, Lua and Rust among others
• Perform security reviews of games, services and other applications; looking for issues in source code, dependencies, and design to strengthen gaming products, platforms, and services
• Reverse-engineer and manipulate Zenimax games and applications to identify and provide remediation actions to help correct vulnerabilities that may be exploited
• Provide detailed security review reports to developers and other stakeholders
• Keep up with development and security trends in the video game industry and in the technology sector
• Up to 10% travel may be required

Qualifications

• 7+ years application security experience; or 7+ years software engineering experience including some application security experience
• Advanced experience reading and writing source code in a variety of languages
• Knowledgeable in security aspects of operating system internals
• Expert-level experience with C++, C#, GoLang, Rust
• Introductory knowledge of scripting languages or similar (Python, JavaScript, Ruby,etc.)
• Experience with application security tools such as CodeQL, Legit, SemGrep, Dependency Check, CredScan, etc.
• Advanced low-level debugging experience using tools such as IDA Pro, Ghidra, WinDbg, etc
• Usage and understanding of cryptographic libraries and implementations
• Strong engineering skills with attention to detail
• Significant Git version control experience
• Ability to multi-task and thrive on a small team in a fast-paced environment
• Passionate about security technologies, techniques, and trends
• Excellent verbal, written, and interpersonal skills
• Bachelor’s degree in IT, Computer Science, or similar, or equivalent experience
• Ability to thrive in an environment with ambiguity and minimal direction. Must be a self-starter who can take initiative and drive projects to completion independently.

Preferred Skills

• Visual Studio
• Build system implementation using cmake/make
• Perforce version control (P4V)
• SAST/SCA/Secrets Detection tooling
• Cloud computing and infrastructure (AWS, GCP, Azure, OpenStack, etc)
• Software product deployment
• Game industry technologies
• Experience with Large Language Models (AI)

Salary Range

Senior Application Security Engineer - The typical base pay range for this position at the start of employment is expected to be between $100,000 - $215,000 per year.

ZeniMax has different base pay ranges for different work locations within the United States, which allows us to pay employees competitively and consistently in different geographic markets. The range above reflects the potential base pay across the U.S. for this role; the applicable base pay range will depend on what ultimately is determined to be the candidate’s primary work location. Individual base pay depends on various factors, in addition to primary work location, such as complexity and responsibility of role, job duties/requirements, and relevant experience and skills. Base pay ranges are reviewed and typically updated each year. Offers are made within the base pay range applicable at the time.

At ZeniMax certain roles are eligible for additional rewards, such as merit increases and discretionary bonuses. These awards are allocated based on individual performance and are not guaranteed. Benefits/perks listed here may vary depending on the nature of employment with ZeniMax and the country work location. U.S.-based employees have access to healthcare benefits, a 401(k) plan and company match, short-term and long-term disability coverage, basic life insurance, wellbeing benefits, paid vacation time, paid sick and mental health time, and several paid holidays, among others.

We embrace diversity, equity, and inclusion in everything we do – from recruiting for our studios, publishing and operations to fostering safe and respectful workplaces that encourage collaboration. Our culture is based on principles of respect, inclusion, and fair treatment and we welcome anyone into our family without regard to race, religion, gender identity, sexual orientation, or age.

Our diversity fuels our innovation and inspires us to create game worlds that bring us closer to the global community of players we serve.