Senior Application Security Platform Engineer

Builds and runs secure development pipeline tooling for Rockstar Games' Application Security team, which works with development teams across the company to bring security into the software lifecycle. The engineer architects SDLC security operations inside build pipelines, implements and tunes SAST, SCA, IaC and secrets detection with custom CodeQL and Semgrep rules, sets controls in CI/CD and Kubernetes, monitors pipeline outputs, advises developers, leads and producers, and drives fixes for vulnerabilities found internally or reported publicly.

Rockstar wants five or more years finding and fixing security flaws with automated pipelines, OWASP and client-side security knowledge, TeamCity or GitHub Actions and Kubernetes experience, Windows and Linux, and C# and Python. Full-time in the downtown Manhattan office.