Lead Data Security Engineer New

Rockstar Games

Lead Data Security Engineer New

Salary Not Specified

Rockstar Games, Edinburgh

  • Full time
  • Permanent
  • Onsite working

Posted 1 day ago, 28 Sep | Get your application in today.

Closing date: Closing date not specified

job Ref: 2ec99690ab364a7b91073286a56644c0

Full Job Description

  • Establish and maintain safety protocols to protect assets, and sensitive data collected and used.
  • Track trends in the security community and stay abreast of emerging threats.
  • Maintain inventories of asset and data pipelines covering data classification levels, access patterns, risks and mitigations.
  • Lead engagement with asset development teams to identify security requirements for new and existing products and features, while ensuring other requirements don't introduce an unintended security impact.
  • Lead security assessments using manual and automated processes to identify potential security risks that are not within risk appetite.
  • Work closely with engineering and Information Technology teams to design and configure secure solutions that scale across the company.

    BA/BS in a computer science or related field.
  • Experience of working in an agile environment, delivering incremental and iterative risk reduction.
  • 8+ year(s) of experience working in a professional capacity related to data protection, or similar cybersecurity domains (e.g. data security and identity & access management).
  • Experience in results-oriented, retail driven environment with strict deadlines and ship dates.
  • Strong written and verbal communication skills., Extensive knowledge of defense mechanisms and techniques covering the data security lifecycle (i.e. creation through to destruction).
  • Extensive experience of designing and implementing data access governance controls, covering identification, classification, policies, and auditing.
  • Strong understanding of encryption technologies for data at rest and in transit.
  • Strong understanding of identity & access management concepts such as role-based access controls, principles of least privilege, conditional access, and device trust.
  • Working experience with solution configurations related to data discovery, classification, labelling and designing protection policies.
  • Experience of leading and mentoring junior team members on complex assignments with minimal supervision., Experience leading on large scale security projects, maintaining RAID logs and providing stakeholder updates.
  • Experience of working in environments with conditional access requirements for internal and external parties.
  • Strong security understanding of Microsoft solutions such as Active Directory, M365 and SharePoint.
  • Working experience with CASB and data loss prevention solutions.
  • Understanding of source control systems and CI/CD pipelines.
  • Industry certifications preferred (CISSP, GISP, CSP credentials, etc.).

    At Rockstar Games, we create world-class entertainment experiences.
  • Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar Games is on the lookout for a talented Lead Data Security Engineer with a passion for diving into complex asset development and data workflows, to identify security concerns and opportunities risk reduction. This is a full-time, permanent and in-office position based in Rockstar's state-of-the-art game development studio in Edinburgh, Scotland.,
  • The Rockstar Games Application Security team partners with numerous teams across the company to incorporate security practices throughout the asset development and data lifecycle.
  • We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define secure development workflows and guidelines to safeguard our business and protect our players.
  • We provide guidance and solutions to a wide variety of teams, to ensure that the right people have the right access to the right data at the right time, while also safeguarding sensitive information from unauthorized access.