Senior Offensive Security Engineer

Job description

### **About Atari** Atari is an interactive entertainment company and an iconic gaming industry brand recognized worldwide for its multi-platform games and licensed products. Atari owns and/or manages a portfolio of more than 400 games and franchises, including globally recognized brands such as *Asteroids®*, *Centipede®*, *Missile Command®*, *Pong®*, and *RollerCoaster Tycoon®*. The Atari family of brands includes Digital Eclipse, Nightdive Studios, Infogrames, AtariAge, MobyGames, as well as Hipster Whale, Coatsink, Early Morning Studios, and Stormteller Games—spanning game development, publishing, and community experiences worldwide. Atari operates internationally with offices in the US, UK, in France, Germany, Sweden, and India. ### **Overview** As a Senior Offensive Security Engineer, you will play a crucial role in evaluating and strengthening the security posture of the organization's IT infrastructure, applications, and networks. Your primary responsibilities will include identifying and addressing security vulnerabilities through detailed assessments and hands-on penetration testing. You will work closely with cross-functional teams to enhance security measures and safeguard systems against potential threats. ### **What You’ll Do** **Conduct Vulnerability Assessments** - Perform detailed vulnerability assessments on internal and external systems, networks, and applications. - Utilize automated tools and manual techniques to identify security weaknesses. **Perform Penetration Testing** - Execute penetration tests on IT infrastructure, web applications, mobile platforms, and network components. - Simulate cyber-attacks to evaluate the effectiveness of existing security measures. **Security Operations & Hardening** - AI Security: Familiarity with AI-powered security tools and AI/ML security considerations for detection, analysis, and hardening. - Security Baselining: Experience designing, implementing, and maintaining secure configuration baselines across cloud and on-premise environments. - Configuration Review: Experience performing configuration reviews of different security tools and platforms to identify misconfigurations and drive them to closure. - Broad knowledge of security technologies related to applications, databases, networks, servers, Active Directory, and desktops. - Support incident response efforts by assisting with root cause analysis (RCA) or incident containment. **Analyze and Report Findings** - Analyze assessment and testing results to identify potential vulnerabilities and risks. - Prepare comprehensive reports with actionable recommendations for remediation. - Communicate findings effectively to both technical and non-technical stakeholders. **Collaborate with Teams** - Work closely with security, development, and operations teams to prioritize and remediate identified vulnerabilities. - Assist in implementing security controls and solutions. **Maintain Documentation** - Develop and maintain documentation related to assessment methodologies, findings, and remediation recommendations. - Ensure all documentation remains updated and easily accessible. **Stay Current with Cybersecurity Trends** - Stay updated with emerging cybersecurity threats, vulnerabilities, and industry best practices. - Incorporate new knowledge and techniques into testing activities to improve effectiveness. ### **Requirements & Qualifications** **Educational Background** - Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. **Technical Skills** - Strong understanding of network protocols, operating systems, and web technologies. - Proficiency with security testing tools such as Nessus, Nmap, Burp Suite, Metasploit, and similar platforms. - In-depth knowledge of IT security standards and frameworks such as OWASP, NIST, and SANS Top 25. - Familiarity with the OSI model, TCP/IP model, and core networking concepts. - Hands-on experience in manual penetration testing and security assessments. **Experience** - 3+ years of relevant experience in VAPT or cybersecurity-related roles. **Desired Eligibility (Medium Priority)** - Experience with IoT/OT security will be considered an added advantage. - Deep understanding of embedded protocols such as UART, I2C, SPI, JTAG, and SWD. - Experience with radio protocol attacks involving BLE, Wi-Fi, LoRa, DSP, and SDR. **Certifications** - Certifications such as CEH (Certified Ethical Hacker), OSCP (Offensive Security Certified Professional), or equivalent are preferred. ### **Preferred / Nice-to-Have** - Experience with penetration testing simulations such as Hack The Box or Capture The Flag (CTF) exercises. - Security Automation & Scripting: Proficiency in scripting languages (e.g., Python, Bash, or PowerShell) to automate security testing and reporting tasks. - Security Governance & Vendor Management: Experience in Vendor Risk Assessments or IT Governance processes. - Cultural Alignment: Demonstrated intellectual curiosity and a proven track record of continuous learning in the rapidly evolving security landscape. - Hands-on experience with commercial and open-source tools/frameworks including Burp Suite, Metasploit, Core Impact, Scapy, AppScan, WebInspect, Qualys, Nessus, Nmap, SQLmap, and OWASP ZAP. ### Travel Travel may be required across the country for project execution, monitoring, assessments, testing activities, and coordination with geographically distributed teams, as and when required. ### **To Apply** Please submit your resume, a cover letter summarising your experience with the relevant technologies and tools listed above, and a link to your GitHub, portfolio, or any other relevant projects using the form below. ### **EEO Statement** Atari is an equal opportunity employer and we are committed to providing a workplace free from harassment and discrimination. We are committed to equal employment regardless of race, religion or lack thereof, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, medical condition, veteran status, ancestry, disability status, pregnancy, parental status, genetic information, political affiliation, or any other status protected by the laws or regulations in the locations where we operate.