Senior Security Engineer, Software

Scopely; Zürich; Vor Ort; CHF 110.000 - 140.000; Vollzeit

Zusammenfassung

Scopely's Security Team in Zürich is seeking a Senior Security Engineer to enhance the security posture of applications and infrastructure. The role involves performing security reviews, providing guidance across teams, and building automation to streamline security processes.

The ideal candidate will have at least 5 years of experience in cloud-centric environments, strong programming skills in Go or Java, and a deep understanding of security vulnerabilities. Join us in transforming our security strategies!

Qualifikationen

• 5+ years of experience in a global company with cloud-centric infrastructure.
• In-depth experience in hardening distributed web services, cloud services, and platform architectures.
• Demonstrate strong programming skills and understanding of common vulnerability classes.

Aufgaben

• Perform security reviews and audits of platform and application software.
• Provide guidance to product and operations teams.
• Build automation and tooling for the Security Team.

Kenntnisse

Cloud-centric infrastructure

Programming skills in Go or Java

Experience with AI tools

Strong communication skills

Hardening distributed web services

Jobbeschreibung

Formerly Niantic, Scopely's Security Team seeks a Senior Security Engineer to improve the security posture of our software development lifecycle, applications, and build infrastructure.

Responsibilities

• Perform security reviews and audits of platform and application software throughout design and launch.
• Provide guidance and expertise to product and operations teams across Scopely.
• Build automation and tooling that amplify the Security Team’s impact and improve the developer experience.
• Drive initiatives in security architecture, application scanning, fuzzing, and other proactive defenses.
• Contribute to hardening efforts across in-house libraries, CI/CD systems, and cloud/container environments.
• Be responsible for third‑party library reviews and manage vulnerability remediation.
• Educate engineers on secure coding practices and help standardize security across teams.
• Engage in red‑team exercises and coordinate with internal teams and external pentesting partners.
• Implement and maintain agentic or AI‑enabled workflows to speed‑up common security tasks.

Qualifications

• 5+ years of experience in a global company with cloud‑centric infrastructure (preferably GCP).
• You have in-depth experience in hardening distributed web services, cloud services and platform architectures.
• You can demonstrate strong programming skills (preferably Go or Java) and a deep understanding of common vulnerability classes and exploitation patterns across modern stacks.
• Excellent communication skills and experience collaborating across distributed teams.
• You have implemented services and applications with the help of AI tools like Claude, Codex, OpenCode or Gemini and are adept in the use of these tools.

Plus If...

• Have participated in red‑team operations or managed mitigation tracking.
• Possess deep familiarity with build systems, artifact repositories, or large‑scale infrastructure.
• Have delivered privacy‑focused solutions for user‑facing services.
• Have experience in code quality management or security champion programs.
• Have worked in a customer‑centric engineering culture and value pragmatic, scalable solutions.
• Have implemented agentic workflows, MCPs.
• Can demonstrate hands‑on experience or research in the area of AI security and safety.

Employment at Scopely is based solely on a person's merit and qualifications. Scopely does not discriminate against any employee or applicant because of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), or any other basis protected by law. We also consider qualified applicants with arrest or conviction records, consistent with applicable federal, state and local law.