Staff Security Architect

Fortis Games; Gijón; Presencial; EUR 50.000 - 80.000; Jornada completa

Descripción de la vacante

Fortis Games is seeking a Staff Security Architect to design security solutions for games and data infrastructure. The role involves collaboration across teams to embed security practices, ensuring compliance with key regulations. This position offers the chance to significantly impact security initiatives in innovative gaming contexts while promoting a culture of inclusion and diversity.

Formación

• 5+ years in security architecture or application security required.
• Proficient in mobile security standards and threat modeling.
• Deep understanding of secure coding practices.

Responsabilidades

• Design and implement security architectures for games and data.
• Lead threat modeling efforts and identify security vulnerabilities.
• Ensure compliance with GDPR, NIST, and ISO standards.

Conocimientos

Threat Modeling

Compliance

Risk Management

Collaboration

Problem-Solving

Educación

Bachelor's degree in Computer Science

Equivalent experience

Herramientas

CI/CD Tools

Security Testing Tools

Descripción del empleo

At Fortis Games, we aspire to create great games that bring people together while redefining how game companies operate. We believe in fostering a sense of belonging through our games, communities, and company culture. Our goal is to build powerful connections and lasting memories, promoting diversity, equity, and inclusion in everything we do.

As an early-stage but dynamic organization led by industry veterans, we offer opportunities for significant impact on our products and company direction. If you are passionate about solving challenging problems with clear communication and a team-first mindset, you might be a great fit for us.

About the role

As a Staff Security Architect at Fortis Games, you will be crucial in designing and implementing security architectures to safeguard our games and data infrastructure. You will collaborate with engineering, data, compliance, and product teams to embed security practices, conduct threat modeling, and ensure compliance with standards such as GDPR and NIST. Your expertise will guide security measures in third-party publishing, mergers, and acquisitions, and shape security strategies in an agile environment. Additionally, you will lead security initiatives for AI and automation systems, helping us build secure AI infrastructure from the ground up.

What you will achieve

• Privacy by Design : Incorporate privacy principles into the software development lifecycle, ensuring compliance with regulations like GDPR and CCPA.
• Shift-Left Security : Embed security throughout all development phases to proactively identify and mitigate risks.
• Threat Modeling : Lead threat modeling efforts for mobile apps, APIs, and backend systems to identify vulnerabilities and suggest mitigations.
• Data Flow Diagram Expertise : Work with engineering teams to create and review data flow diagrams for mobile architectures, ensuring security and privacy considerations.
• Risk Management : Identify security gaps, propose solutions, and ensure implementation of mitigation measures.
• Security Testing Integration : Collaborate with QA and DevOps to integrate security tools into CI / CD pipelines for continuous validation.
• Collaboration and Guidance : Work with cross-functional teams to deliver secure, scalable solutions while managing ambiguity.
• Compliance and Governance : Ensure solutions meet industry standards (GDPR, NIST, ISO 27001) and company policies.
• Mobile Security Leadership : Design secure mobile app architectures and validate third-party SDK security.
• Security Awareness : Promote security best practices and foster a security-first culture within teams.
• Secure AI & Automation Development : Define and implement security practices for AI / ML systems, ensuring ethical and regulatory compliance.

What you will need to be successful

• Bachelor's degree in Computer Science, Information Security, or related field, or equivalent experience.
• 5+ years in security architecture, application security, or mobile development.
• Expertise in privacy by design, threat modeling, and SDLC.
• Proficiency with data flow diagrams and mobile security standards.
• Experience integrating security tools into CI / CD pipelines.
• Deep understanding of secure coding practices and vulnerabilities (OWASP, CWE, MASVS).
• Ability to identify security gaps and implement practical solutions.
• Comfort with ambiguity and proactive security control enforcement.
• Knowledge of regulatory and compliance frameworks (GDPR, ISO 27001, NIST).
• Experience securing AI / ML systems, understanding model threats and responsible AI principles.
• Strong problem-solving, communication, and collaboration skills.

Joining Fortis Games means being part of a team that is revolutionizing how game studios operate, creating engaging communities, and fostering an inclusive environment. We value diversity, growth, and the impact our team members make in and out of gaming.

Fortis is an Equal Opportunity Employer. All qualified applicants will receive consideration without discrimination based on race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, disability, or other protected characteristics.

J-18808-Ljbffr