Application Security Specialist (Architecture) at Jagex

Cambridge, England, United Kingdom

Jagex Logo
Not SpecifiedCompensation
Mid-level (3 to 4 years)Experience Level
Full TimeJob Type
UnknownVisa
GamingIndustries

Requirements

  • At least 3 years of experience in software engineering
  • At least 2 years of experience in application security
  • In-depth knowledge of application security vulnerabilities, testing techniques, and the OWASP framework
  • Team player able to build relationships across the organization
  • In-depth understanding of secure web application development
  • Experience in web application and Agile development methodologies
  • Comprehensive knowledge of IT and information security subject matter
  • Exposure to methods of promoting security awareness
  • Strong communication (verbal/written) and influencing skills, with an ability to manage internal and external relationships up to senior levels of management
  • Anticipates problems and identifies long-term implications of decisions and actions
  • Ability to work and learn alone
  • Able to prioritize workload and drive work to set deadlines
  • Experience working with the hacker/pen-testing community

Responsibilities

  • Provide guidance on security best practices and compliance and undertake security testing
  • Identify Application security risks and requirements for new projects and system developments
  • Represent cyber in review sprints on application security prior to live implementation
  • Collaborate with the architecture and development teams to review the design and code for security vulnerabilities
  • Establish a threat modelling capability and evangelise secure coding in the development lifecycle
  • Provide technical specialist advice to ensure that security standards are understood and can be complied with
  • Develop security testing plans and integrate into the software development lifecycle (S-SDLC)
  • Perform and oversee security testing and manage remediation of identified vulnerabilities
  • Take part in the security incident response team
  • Prepare and monitor application security metrics and KPIs
  • Participation in an on-call rotation

Skills

Key technologies and capabilities for this role

OWASPThreat ModelingSecure SDLCApplication Security TestingSecurity Best PracticesAgileWeb Application SecuritySecurity MetricsIncident Response

Questions & Answers

Common questions about this position

What benefits does Jagex offer for this role?

Jagex offers a generous perks and benefits package including private healthcare with dental plan, minimum 6% pension contributions, employee assistance programme and onsite counselling, life insurance, discretionary annual performance bonus, enhanced family leave policies from day 1, flexible working hours, and 25 days annual leave plus bank holidays with option to buy/sell holidays.

Is this position remote or hybrid?

The position is hybrid.

What experience and skills are required for this Application Security Specialist role?

Candidates need at least 3 years of software engineering experience, 2 years in application security, in-depth knowledge of application security vulnerabilities, OWASP framework, secure web application development, and experience in web application and Agile methodologies, plus strong communication and team collaboration skills.

Is there an on-call requirement for this position?

Yes, this position requires participation in an on-call rotation.

What makes a strong candidate for this role at Jagex?

A strong candidate has 3+ years in software engineering and 2+ years in application security, deep knowledge of OWASP and secure development, experience with threat modeling and security testing, strong communication skills to collaborate across teams, and familiarity with the hacker/pen-testing community.

Jagex

Develops and maintains online multiplayer games

About Jagex

Jagex develops and maintains online games that continuously evolve with new content and updates, known as "living games." Their most famous title is RuneScape, a massively multiplayer online role-playing game (MMORPG) that attracts a diverse player base, from casual gamers to dedicated enthusiasts. Players can access basic features for free or choose a premium membership for additional content and benefits. Jagex also offers in-game purchases for virtual items and enhancements. What sets Jagex apart from competitors is its strong focus on community engagement and player feedback, which helps improve their games and foster loyalty among players. The company's goal is to create immersive gaming experiences while also supporting mental health initiatives for young people through charitable partnerships.

Cambridge, United KingdomHeadquarters
2001Year Founded
BUYOUTCompany Stage
Social Impact, GamingIndustries
501-1,000Employees

Risks

New survival game development may divert resources from existing projects.
Macarthur Fortune Holding acquisition could lead to strategic shifts alienating players.
Focus on non-Runescape projects might impact RuneScape's quality and support.

Differentiation

Jagex specializes in 'living games' that evolve with continuous updates.
RuneScape, Jagex's flagship game, has a large and dedicated player base.
Jagex emphasizes community engagement and player feedback for game improvements.

Upsides

Increased interest in survival games benefits Jagex's new RuneScape universe game.
Unreal Engine 5 use aligns with trends for high-fidelity graphics and player retention.
Macarthur Fortune Holding acquisition provides resources for expansion and innovation.

Land your dream remote job 3x faster with AI