Staff Security Architect

February 15

Apply Now

Receive Emails with Similar Jobs

Fortis Games

WebsiteLinkedInAll Job Openings

Fortis Games is a gaming company dedicated to creating meaningful and engaging video games. With an international, fully remote team, Fortis focuses on innovative game design as a competitive advantage. The company fosters collaboration over competition, seeking to build connections and inspire communities through their creative works. Fortis Games is committed to redefining industry standards by changing the conventional approach to teamwork, project development, and recruitment within the gaming industry.

video games • games • gaming • social games • interactive entertainment

201 - 500 employees

🎮 Gaming

📋 Description

• As a Staff Security Architect at Fortis Games, you will play a pivotal role in designing and implementing security architecture to protect our games and data infrastructure. • You’ll work closely with engineering, data, compliance, and product teams to integrate Shift-Left Security practices, conduct threat modeling, and ensure compliance with GDPR, NIST, and industry standards. • Your expertise will be key in securing third-party publishing, mergers, and acquisitions, as well as shaping security strategies in an agile, fast-paced development environment.

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent work experience). • 5+ years of experience in security architecture, application security, or mobile app development. • Expertise in privacy by design, threat modeling, and secure software development lifecycle (SSDLC). • Strong familiarity with data flow diagrams and their application in mobile app development. • Hands-on experience with integrating security tools (e.g., SAST, DAST, IaC) into CI/CD pipelines. • Deep understanding of secure coding practices, common vulnerabilities (e.g., OWASP Top 10, CWE), and mobile security standards (e.g., OWASP MASVS). • Ability to identify security gaps and provide actionable, practical solutions while balancing business and security needs. • Comfortable navigating ambiguity with a proactive, solutions-oriented approach, while assertively mandating necessary security controls. • Familiarity with regulatory and compliance frameworks (e.g., GDPR, ISO 27001, NIST 800-53). • Excellent problem-solving, communication, and collaboration skills.