Senior Security Engineer

Zynga develops, markets, and operates social games as live services played on the Internet, social networking sites, and mobile platforms in the United States and internationally. It offers its online social games primarily under the Slots, Words With Friends, Zynga Poker, and FarmVille franchises. The company’s games are accessible on mobile platforms, Facebook, and other social networks, as well as Zynga.com. It also provides advertising services to advertising agencies and brokers.

Zynga is seeking a Sr. Security Engineer to focus on today’s evolving cyber security threats. This individual will be a significant contributor to Zynga’s Information Security team, responsible for researching, developing and deploying technical solutions to provide a multi-layered approach to security. The right candidate for this position will be an experienced security practitioner with a wide range of expertise in multiple security disciplines and an ability to operate in a fast-paced, dynamic environment.

* Serve as an internal subject matter expert for information security issues, trends and leading practices, maintaining an in-depth holistic understanding of attack vectors, current threats, and remediation strategies. * Conduct reviews on new and existing infrastructure to identify gaps and recommendations in current solutions and processes to remediate risks. * Contribute to the development and execution of Zynga’s overall Information Security strategy. * Participate in carrying out varying security risk assessments, providing advisory support to corporate/studio contacts on the evaluation of risks, development of risk responses, and work with stakeholders to define and implement process enhancements. * Implement and own security solutions that provide visibility into security issues inside the company (vulnerability scanners, endpoint security, intrusion detection/prevention, network analysis, security event management). * Perform discovery and vulnerability scans on networks and validate findings through penetration testing. * Perform application security reviews leveraging commercial and open-source solutions. * Contribute to the development and maintenance of documented security solution run-book procedures and techniques. * Build complete security solutions by integrating off-the-shelf and custom security tools.

**Required skills and experience** * 6+ years experience in information technology with a minimum of 4 years information security and risk. * Strong ability to manage and report on multiple projects concurrently, prioritizing efforts, managing time effectively, and requiring minimal supervision in the execution. * Demonstrated problem solving, analytical and investigative skills combined with the ability to develop creative solutions and navigate through ambiguity in a fast-paced, agile environment. * Strong understanding or ability to rapidly learn the technology and social gaming industry and desire for expanding core competencies. * Deep understanding of information security specifically around continuous monitoring and automation techniques. * Proficient experience and thorough understanding of adversarial tactics, techniques, and response mitigation procedures. * Solid team player, collaborating well with others to solve problems in a team-focused dynamic. * Excellent written and communications skills, as well as strong interpersonal and relationship building skills. * Self-starter, capable of working independently and in a team environment * Excellent meeting facilitation, presentation, report-writing and demonstrated attention to detail. * Sound knowledge of industry approaches related to network device and system-level hardening best practices. **Recommended skills, experience and certifications** * Sound knowledge and experience with administering and securing Windows and Linux systems. * Prior experience with implementing and administering network security, incident response, full packet capture and malware detection solutions including network architecture and security infrastructure placement. * Professional information security related certifications. * Experience in social media, technology, and/or gaming industry. * Previous experience in a solutions engineering professional services role desirable.