Security Engineer - Game Security & Platform Protection

Security Engineer - Game Security & Platform Protection
100% Remote

12+ Months

Top 3 Required Skill Sets:-

812+ years of experience in Security Engineering, Software Engineering, or Product Security

Strong background in Game Security, Application Security, or Platform Security

Hands-on experience with Unity game engine and backend systems

Job Description:-

We are seeking an experienced Security Engineer Game Security & Platform Protection to join our Information Security team. This role is responsible for securing game clients, backend services, and content distribution platforms with a strong focus on game integrity, asset protection, secure software development, and cloud security.

This is a highly technical, hands-on role requiring expertise across Unity, backend technologies, AWS cloud infrastructure, DevSecOps, and secure software engineering.

Key Responsibilities:-

Secure Game Clients & Content Pipelines

Harden asset bundles and content delivery pipelines.

Design and implement:

Signed asset manifests and validation mechanisms

Downloaded content integrity verification

Secure bundle loading and trusted source enforcement

CDN metadata validation and expiration controls

Identify and mitigate:

Leaked internal endpoints

Hidden/test feature exposure

Reverse engineering risks

Strengthen Game Integrity & Signature Systems

Improve signature architecture and secret management.

Implement:

Per-game and per-platform secret isolation

Secure key storage and rotation

Backward-compatible signature evolution

Reduce risks associated with shared cryptographic implementations.

Third-Party SDK Security

Manage security governance for third-party SDKs.

Perform:

SDK inventory and permission analysis

Security reviews and approval workflows

Vulnerability monitoring and version management

Partner with engineering teams to isolate or sandbox high-risk SDKs.

Secure Software Development

Collaborate with Unity and backend engineering teams.

Integrate security into CI/CD pipelines (Bamboo, GitHub Actions).

Automate security scanning, validation, and enforcement.

Promote secure coding practices across:

Unity

ASP.NET Core

React

Angular

Cloud & Infrastructure Security

Design and implement AWS security controls including:

IAM

EC2

ECS

EKS

ECR

SSM

SCP

Secure deployment pipelines, runtime environments, and secrets management.

Security Automation

Develop automation using Python, C#, and Bash.

Implement Infrastructure as Code security using:

Terraform

AWS CDK

CloudFormation

Ansible

Integrate security into JFrog artifact management and developer workflows.

Technical Leadership

Partner with game studios and engineering teams to align security initiatives with product roadmaps.

Provide expertise on client-side security, reverse engineering, and exploitation risks.

Drive adoption of scalable security best practices across engineering teams.

Required Qualifications:-

812+ years in Security Engineering, Software Engineering, or Product Security.

Strong experience in Game Security, Platform Security, or Application Security.

Hands-on experience with Unity and backend systems.

Technical Skills

Strong programming experience in:

C#

Python

Bash

Experience securing applications built with:

ASP.NET Core

React

Angular

Deep understanding of:

Secure client-server communication

Asset protection and code obfuscation

Reverse engineering and anti-tampering techniques

Cloud & DevSecOps

Hands-on AWS experience:

IAM

EC2

ECS

EKS

ECR

SSM

SCP

Experience with:

Bamboo

GitHub Actions

Terraform

AWS CDK

CloudFormation

Ansible

JFrog

Git-based workflows

Security Knowledge

OWASP and Application Security best practices.

Secure SDLC implementation.

Cryptography fundamentals and key management.

Experience mitigating:

Client-side vulnerabilities

Asset leakage

Third-party supply chain risks

Preferred Qualifications

Experience in mobile or live-service gaming.

Offensive security or reverse engineering experience.

Anti-cheat or anti-tampering system design.

CDN security and content distribution expertise.

Security certifications such as CISSP, OSCP, or equivalent.