Application Security Researcher

Join us at Playtika (NASDAQ: PLTK), where we're driven by the belief life needs play. We’re on a mission to deliver infinite ways to play using cutting-edge technologies like AI and machine learning to craft immersive experiences that connect, inspire and entertain millions of players worldwide.

From our start as a small mobile games company founded in Israel to our current position as a publicly traded company and industry leader, we continue to be a dominant force in interactive entertainment. With a diverse portfolio of award-winning, category-leading Casual and Social Casino-themed games, including nine of the top 100 highest-grossing mobile games in the US, we're setting the standard for excellence.

Our success story is co-authored by a dynamic team of storytellers, strategists, creators and data scientists who thrive on innovation. We are home of the best, advancing an inclusive culture that embraces our core values and reflects our agile DNA.

With a strong financial foundation, disciplined operations, unwavering player-focused approach and relentless can-do spirit, we're well-positioned for sustained growth. If you're ready to join the driving force behind the evolution of interactive entertainment, we invite you to come play with us.

Responsibilities

As an Application Security Researcher, you will

• Design secure solutions to support R&D and business needs.
• Lead in-depth security assessments, architecture reviews, threat modeling of the application stack, including applications built on cloud and emerging technologies.
• Proactively research the company’s architecture & technologies to find impactful vulnerabilities & misconfigurations
• Review source code for potential security issues, recommend and implement fixes.
• Write security test cases to check for vulnerabilities or broken/missing security controls.
• Providing specific risk assessment and remediation guidelines for developers and business owners.
• Help manage and triage findings from various sources like penetration tests, security tools/scanners and bug-bounty reports..
• Research the latest security standard methodologies, trends, threats and vulnerabilities, and technology frameworks.
• Document and disseminating security guidelines for common security issues, remediation guidance, and security baselines.
• Provide guidance for EU GDPR and CCPA compliance on the technological side - database security, inventory, and masking.
• Participate in the incident response team during crises.
• Work closely with architects, developers, DevOps & IT Engineering to provide security guidance and mentor them, as necessary.
• Actively promote improving the security culture and education within the organization.
  
  

• 3+ years of experience in web & mobile application security, SSDLC, Threat Modeling
• Deep understanding of web application security threats, exploits, prevention
• Ability to triage, reproduce, recommend remediations and implement fixes for vulnerabilities
• Experience in penetration testing, vulnerability scanning, SAST, and DAST. Familiar with tools and technologies used
• Passion for understanding and researching vulnerabilities and exploitation techniques
• Knowledge of DevSecOps methodologies, tools and technologies (e.g. CI/CD)
• Proficiency in networking concepts (firewalls, load balancers, etc)
• Keeps up with industry trends in security technology and threats
• Experience in securing infrastructure in a public cloud (e.g. AWS, Azure, Google Cloud)
• Having a background in web/mobile application development and/or code auditing - strongly preferred
• Ability to work in a self-directed environment that is highly collaborative and cross-functional
• Understanding of EU GDPR and CCPA
• Experience in managing a bug-bounty program - an advantage
• Experience in writing scripts and automated tools in at least one of the following languages - Python, Bash, Ruby and Go
• Experience in performing red team assessments – an advantage
• A computer science degree – an advantage