Senior Application Security Platform Engineer

Become part of a team working on some of the most rewarding, large-scale creative projects in entertainment within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry.

About the Role

The Rockstar Games Application Security team partners with numerous development teams across the company to incorporate security practices throughout the software development lifecycle. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define secure development standards and guidelines to safeguard our business and protect our players. We independently assess our application code and builds through various techniques (static analysis, dynamic analysis, software composition analysis, etc.) to identify potential vulnerabilities and design flaws and work with development teams to remediate.

Responsibilities

• Architect and support secure software development lifecycle operations embedded in software development pipelines.
• Provide technical security guidance to developers, team leads, and producers.
• Drive remediation efforts behind internally and publicly identified vulnerabilities.

Requirements

• 5+ years of experience working in a professional, academic, or research environment identifying and remediating security bugs/flaws, assisted by automated pipelines.
• Knowledge of common web security vulnerabilities (e.g., OWASP Top 10), client-side security landscape, attack techniques, and remediation tactics/strategies.
• Experience implementing and tuning SAST, SCA, IaC, and Secrets Detection tools effectively, especially fine-tuning static analysis detections with custom rule engines (CodeQL, Semgrep).
• Expertise deploying within CI/CD platforms (TeamCity or GitHub Actions) and container orchestration frameworks (e.g., Kubernetes), including establishing appropriate security controls in them.
• Experience in establishing monitoring and observability techniques of build pipelines and their outputs.
• Experience with both Windows and Linux operating systems.
• Proficiency in C# and Python.

Pluses

• Hands-on experience building or deploying security agents using frameworks like LangChain or LangGraph to automate complex multi-step security tasks.
• Familiarity with using Infrastructure as Code languages (Terraform, Pulumi) to deploy secure architecture.
• Experience enforcing security guardrails with Policy as Code (e.g., OPA) engines to existing and new CI/CD workflows.
• Understanding of C++ and associated compilers.
• Experience in establishing CI/CD controls for cloud-native pipelines and runtime environments.

Pay

The pay range for this position in New York State (inclusive of New York City) at the start of employment is expected to be between $121,400—$166,700 USD per year. Base pay offered may vary depending on job-related knowledge, skills, experience, and other objective business considerations. The total compensation package may also include a bonus and/or equity awards, in addition to a full range of medical, financial, and/or other benefits.

Schedule

This is a full-time, in-office position based out of Rockstar’s NYC headquarters in Downtown Manhattan.