Information Security Engineer

Founded in 2002, Big Fish is the world's largest producer and distributor of casual games, delivering fun to millions of people around the world. Through its mobile and online distribution platforms, Big Fish has distributed more than 2.5 billion games to customers in 150 countries from a growing catalog of 450+ unique mobile games and 3,500+ unique PC games.

The Information Security Engineer will be responsible for all aspects of informational security at Big Fish Games. This includes but is not limited to: daily report reviews, following and enhancing standard operating procedures, security assessments for new services, creation of threat models, and vulnerability management.

• Analyze, troubleshoot, and investigate security-related, information systems’ anomalies based on security platform reporting, network traffic, log files, host-based and automated security alerts
• Understand and manage file integrity verification and monitoring
• Develop technical solutions to help mitigate security vulnerabilities
• Conduct research to identify new attack vectors against Big Fish services
• Management of next generation firewall technologies
• Management of client end-point security software
• Support PCI-DSS and SOX compliance audits
• Strong understanding of IT Governance Controls
• Ability to work and collaborate with auditors and accessors
• Participate in on-call rotation

• Comfortable working on Linux, OSX, and Windows operating systems
• Solid foundation in web security, mobile security, penetration testing and cryptography
• Expertise in conducting web and mobile security assessments covering threat modeling, design reviews and in-depth implementation audits
• Security Information & Event Management (SIEM) platform experience
• Excellent interpersonal and communication skills
• Strong self-motivation and orientation toward results
• Excellent written and verbal skills
• Strong understanding and support of change management, continuous improvement and Lean principles
• Scripting ability in several languages (e.g. Bash, Perl, Python, PowerShell)
• Ability to work in a fast paced Operations team and organization
• CISSP certification is a plus