Senior Game Integrity Engineer - Live Competition Security

MrBeast; New York (NY); On-site; USD 202,000 - 236,000; Full time

Benefits offered by this job

Competitive Salary

Medical Benefits

Dental & Vision

Life Insurance

HSA Contributions

401k Matching

Flexible vacation

Relocation assistance

Job summary

MrBeast is seeking a Senior Game Security & Integrity Engineer to own trust across tournaments and prize economies. The role combines secure architecture, automated detection at scale, and rapid response to evolving threats in a high-profile gaming environment.

You will partner with gameplay, platform, data, and security teams to implement protections across mobile clients, backend services, APIs, and real-time telemetry, ensuring fairness and resilience for global audiences.

Qualifications

• 6+ years in game security, application security, anti-cheat engineering, fraud prevention, or mobile security.
• Strong software-development skills in Python or TypeScript, with experience building backend services, detection tools, or automation.
• Deep understanding of API security, authentication/authorization, session management, and applied cryptography.
• Hands-on experience with mobile platform security: iOS/Android app hardening, attestation, root/jailbreak detection, or reverse engineering of mobile apps.
• Understanding of server-authoritative game design and common cheating and abuse techniques.
• Working knowledge of at least one major cloud (AWS, GCP, or Azure) and distributed, real-time architectures.
• Strongly Preferred: Experience with mobile instrumentation and RE tooling and with prize‑bearing competitions security.

Responsibilities

• Design the integrity architecture for large-scale synchronous competitions: server-authoritative scoring, verifiable game outcomes, and tamper-evident result pipelines.
• Detect and prevent score injection, result forgery, replay attacks, and clock/latency manipulation in real-time brackets.
• Build defenses against multi-accounting, collusion, account sharing, and Sybil attacks on qualification and elimination rounds.
• Define fairness controls for prize-bearing events, including anomaly review workflows before payouts are released.
• Design client-side and server-side controls to detect bots, automation, input replay, memory manipulation, code injection, and modified or repackaged app clients.
• Implement and operate device attestation, root/jailbreak detection, emulator detection, and device fingerprinting.
• Evaluate and integrate mobile app-hardening/RASP and anti-cheat capabilities where appropriate.
• Partner with gameplay engineers to ensure server-authoritative validation for core game logic, scoring, and transactions.
• Review APIs, WebSocket services, and real-time protocols for tampering, replay, authorization, and abuse risks.
• Develop reusable security controls for rate limiting, session integrity, and transaction validation.
• Build systems to detect account takeover, payment and payout fraud, chargeback abuse, and promo abuse.
• Protect prize disbursement with eligibility checks and KYC coordination.
• Translate abuse patterns into durable product controls and detection logic.
• Develop telemetry services, automation, and tooling (Python/TypeScript) and dashboards for cheating, botting, and fraud detection.
• Create threat models, perform penetration tests, secure code reviews, and security assessments of mobile clients, APIs, and backend services.
• Lead incident response during live events and create post-incident improvements and playbooks.

Skills

Game security

API security

Mobile security

Server-authoritative design

Cloud platforms

Threat modeling

Python

TypeScript

Fraud prevention

Incident response

Job description

MrBeast is seeking a Senior Game Security & Integrity Engineer to own trust across tournaments and prize economies. The role combines secure architecture, automated detection at scale, and rapid response to evolving threats in a high-profile gaming environment.

You will partner with gameplay, platform, data, and security teams to implement protections across mobile clients, backend services, APIs, and real-time telemetry, ensuring fairness and resilience for global audiences.