Principal Application Security Engineer

Zynga is a global leader in interactive entertainment with a mission to connect the world through games and a wholly-owned subsidiary of Take-Two Interactive Software, Inc. (NASDAQ: TTWO). With massive global reach in more than 175 countries and regions, the combined diverse portfolio of popular game franchises has been downloaded more than 6 billion times on mobile, including Star Wars™: Hunters, CSR Racing™, Dragon City, Empires & Puzzles™, FarmVille™, Golf Rival™, Hair Challenge™, Harry Potter: Puzzles & Spells™, High Heels!™, Merge Dragons!™, Merge Magic!™, Monster Legends, Toon Blast™, Top Eleven, Toy Blast™, Two Dots, Words With Friends™, and Zynga Poker™.Founded in 2007, Zynga is headquartered in California with locations in North America, Europe, and Asia. For more information, visit www.zynga.com or follow Zynga on Twitter, Instagram, Facebook, or the Zynga blog

Position Overview:

In partnership with cybersecurity leadership, the Principal Application Security Engineer will work with product teams, game studios, central technology teams, and cybersecurity to perform proactive and offensive security engineering assessments, identifying vulnerabilities in games, systems, applications, and network infrastructure. This role will serve in a lead capacity for application security initiatives, improving overall cybersecurity across our gaming products and services

Position's Duties:

• Collaborate with cybersecurity leadership to engage Game Studios and Central Technology Teams in proactive security assessments, focusing on secure application security engineering and effective solutions.
• Lead application security initiatives to bolster product security efforts within our gaming products and services!
• Serve as an application security domain expert in security testing, offering mentorship to penetration testers in identifying and addressing vulnerabilities.
• Drive security engineering thought leadership within the product teams, encouraging a proactive approach to application security.
• Assess the efficiency of application security measures and provide recommendations for ongoing improvement.
• Evaluate the effectiveness of application security measures and provide recommendations for continuous improvement.
• Engaging in complex engineering discussions and demonstrating deep security expertise to ensure detailed application security assessments and threat analyses are conducted.
• Coordinate application security efforts to ensure compliance with third-party requirements while engaging with external researchers to address vulnerabilities in our products.

Desired Skills and Experience:

• Bachelor's degree in a related field or equivalent work experience; advanced degree in science, engineering, or technology is preferred.
• Strong background in application security engineering, penetration testing, and vulnerability management.
• Proven experience in application development, security assessments, and penetration testing.
• Excellent leadership skills and strong interpersonal abilities.
• Gaming security experience is a plus!
• Ability to work independently and within a distributed team.
• Strong written and verbal communication skills, with great attention to detail.
• Ability to collaborate with teammates and customers to tackle ambiguous challenges.

What we offer you:

• Work in a studio that has complete P&L ownership of games
• Create next-gen games that will be played and loved by millions of players around the world
• Work in a collaborative team that invests in your development and growth on-the-job
• Competitive salary, bonus plan and Employee Stock Purchase Plan
• 20 days annual leave + company holidays
• Extended medical coverage that includes OPD, dental, vision and telehealth
• Group Life, Disability and Critical Illness insurance
• Equitable Childcare facilities for all employees
• Virtual mental health and neurodiversity support programs
• Family planning and nurturing support programs
•  Comprehensive leave options and flexible working hours to ensure work life balance.
• Keep your health on track with our wellbeing programs covering fitness expenses and complimentary meals served around the clock
• Employee Assistance Programs
• Around the year employee events and casual dress every single day
• A diverse team of friendly, fun and supportive co-workers to work with and, impact millions of daily players
• Re-engage with your special interest by being a part of our employee resource groups that connect Zyngites through inclusivity, culture, lifestyle and fun

We are proud to be an equal opportunity employer, which means we are committed to creating and celebrating diverse thoughts, cultures, and backgrounds throughout our organization.  Employment with us is based on substantive ability, objective qualifications, and work ethic – not an individual’s race, creed, color, religion, sex or gender, gender identity or expression, sexual orientation, national origin or ancestry, alienage or citizenship status, physical or mental disability, pregnancy, age, genetic information, veteran status, marital status, status as a victim of domestic violence or sex offenses, reproductive health decision, or any other characteristics protected by applicable law.

As an equal opportunity employer, we are committed to providing the necessary support and accommodation to qualified individuals with disabilities, health conditions, or impairments (subject to any local qualifying requirements) to ensure their full participation in the job application or interview process. Please contact us at accommodationrequest@zynga.com to request any accommodations or for support related to your application for an open position.

Please be aware that Zynga does not conduct job interviews or make job offers over third-party messaging apps such as Telegram, WhatsApp, or others.  Zynga also does not engage in any financial exchanges during the recruitment or onboarding process, and will never ask a candidate for their personal or financial information over an app or other unofficial chat channel.  Any attempt to do so may be the result of a scamp or phishing attack, and you should not engage.  Zynga’s  in-house recruitment team will only contact individuals through their official Company email addresses (i.e., via a zynga.com, naturalmotion.com, smallgiantgames.com, themavens.com, gram.gs email domain).