Information Security Engineer

Who We Are

Headquartered in New York City, Take-Two Interactive Software, Inc. is a leading developer, publisher, and marketer of interactive entertainment for consumers around the globe. The Company develops and publishes products principally through Rockstar Games, 2K, Private Division, and Zynga. Our products are currently designed for console gaming systems, PC, and Mobile, including smartphones and tablets, and are delivered through physical retail, digital download, online platforms, and cloud streaming services. The Company’s common stock is publicly traded on NASDAQ under the symbol TTWO.

While our offices (physical and virtual) are casual and inviting, we are deeply committed to our core tenets of creativity, innovation and efficiency, and individual and team development opportunities. Our industry and business are continually evolving and fast-paced, providing numerous opportunities to learn and hone your skills. We work hard, but we also like to have fun, and believe that we provide a great place to come to work each day to pursue your passions.

 

The Challenge

Success in Take-Two Security means remaining open-minded and dutiful to empower our label divisions to securely develop triple-A game content. The Information Security Engineer role requires the capability to analyze & implement information security systems across the Take-Two technology stack. You will collaborate with our IT Infrastructure, Security Engineering & Ops teams to understand objectives and align to build new or maintain existing security systems. You will also support our Architects to implement new solutions to improve on our Endpoint, Network, Cloud Security, and SOC applications and contribute to developing new tools where the business requires. Reviewing regular network security firewall change requests internally and across our domain subsidiaries to ensure connectivity between us and our customers is implemented securely. Working regularly with Security colleagues in the label teams to assess and respond to their priorities as well as our own.  

 

What You’ll Take On

• Collaborate with Security Engineering, & IT Infrastructure to identify gaps in existing systems to improve our Security analysis, remediation, & monitoring capabilities 
• Using existing Information Security monitoring systems to analyze and respond to events and process technical change requests in support of Infrastructure, Engineering, and Ops teams
• Working with Security Architecture, contribute to Security application implementation for new systems
• Mapping system defenses and monitoring capabilities against threat frameworks like MITRE ATT&CK, and OWASP to create defenses for Take-Two assets with a variety of system solutions
• Maintaining or improving existing Security systems for Endpoint Protection (EPP), Detection & Response (EDR), Network Security Monitoring (NSM), Security Incident & Event Monitoring (SIEM), Data Loss Detection/Prevention (DLD/P), and Cloud Security (CASB)
• Analyze and develop reporting capabilities for associated systems. Represent T2’s compliance across the scope of Information Security applications
• Use of project tools to illustrate milestone progress and to accurately scope project work in line with expectations
• Contribute to technical writing with T2 Information Security Policies, Standards, & technical project documentation in the T2 knowledge base
• Learn or develop programmatic automations to update Information Security systems regularly 
• Potential for participation in incident response with on-call availability

 

What You Bring

• Have a heart for service and a tempered ego
• BA/BS in computer science or related field
• 2-4 years in an Information Security, Security Engineering, or Network Security Engineering related environment
• Knowledge of Security threat frameworks like MITRE ATT&CK, and OWASP 
• Knowledge of and interaction with industry threat intel sources and ability to apply concepts to our enterprise efforts 
• Experience with programming languages Python, C, C++, C#, PowerShell, and VBScript for programmatic automation 
• Knowledge of AWS and other cloud environments 
• Understanding of endpoint protection & network security methodologies and applications (MDM, EPP, EDR, NSM, VAMP)
• Proficiency with endpoint logging tools and techniques, including Windows event forwarding (.evtx), Microsoft SysInternals (Sysmon), and the fundamentals for log aggregation techniques 
• Capability to analyze and understand network security concepts
• Understanding & experience with Windows / Server, Linux (CentOS,