The posting
Continuously delivering content to a global audience of millions of players while also building new games affords Riot's InfoSec discipline with a mountain of exciting and complex challenges. And of course, the attention of very interesting adversary groups.
That's where you come in. Riot Security Operations Engineers hold an in-depth knowledge of specific areas of expertise. We don't just focus on breaking things; we proactively support teams across Riot to develop robust security capabilities which help protect player experiences. We relish the opportunity to work with new tech stacks and product teams, each with their own unique security risk profile.
At the most fundamental level, their goal is to help deliver value to players and make life harder for troublemakers.
Our Security Operations team is responsible for regularly monitoring and analyzing Riot’s security efforts across the organization and for our players. Its mission is to quickly detect, analyze, and respond to various threat actors from across the globe. The ability to not only think critically when it comes to security threats, but technically by developing tools (e.g. automating security processes) is vital to their success. From working closely with local and federal law enforcement agencies around security incidents to defending against the next DDoS, they are here to protect Riot and our players.
You will report to the Supervisor of Security Operations.
Responsibilities:
- Probe, research, and analyze security risks that directly impact players and Riot
- Triage and investigate security events
- Assist identifying new exploits, threats and mitigations for detection engineering
- Contribute to Riot’s global Security Operations roadmap
- Support the incident investigation cycle to ensure proper remediation, eradication, and lessons learned are rolled back into day to day operations.
- Part of European team acting as the escalation point for all security events and investigations
- You will be expected to do a small amount of travel as part of a global team
Required Qualifications:
- 2+ years of experience in an Security Operations or Incident Response role. This should include hands on experience completing tasks like malware detection and analysis, memory analysis, or disk forensics
- Understanding of the life cycle of network threats, attack vectors, and methods of exploitation and common tactics, techniques, and procedures of advanced attackers
- You can automate common tasks using a scripting language (Python, PowerShell, Go or similar)
- Demonstrated understanding of IT and security related technologies and best practices including endpoint incident detection and response, firewalls, networking and operating systems
- As comfortable communicating in distributed teams as with people sitting right next to you
Desired Qualifications:
- Experience working with cloud infrastructure and services such as AWS, Azure, Google Cloud, SoftLayer or Private Clouds
- Experience working with security tooling and logging technology: SIEMs (Datadog/Splunk/ELK), EDR (Crowdstrike, SentinelOne, Microsoft Defender)
- Experience with Detection Engineering, Threat Hunting, and/or Threat Intelligence
- Industry certifications (GCFE, GCFA, GNFA, GCIH) a plus, but not required
For this role, you'll find success through craft expertise, a collaborative spirit, and decision-making that prioritizes your fellow Rioters, who are the customers of your work. Being a dedicated fan of games is not necessary for this position!
Our Perks:
Riot focuses on work/life balance, shown by our open paid time off policy and other perks such as flexible work schedules. We offer medical, dental, and life insurance, parental leave for you, your spouse/domestic partner, and children, and Riot will support your retirement benefits with a company match, and double down on your donations of time and money to non-profit charitable organizations. Check out our benefits pages for more information.
At Riot Games, we put players first. That mission drives every decision in our quest to create games and experiences that make it better to be a player. Whether you’re working directly on a new player-facing experience or you’re supporting the company as a whole, everyone at Riot is part of our mission. And just like in our games, we’re better when we work together. Our goal is to create collaborative teams where you are empowered to bring your unique perspective everyday. If that sounds like the kind of place you want to work, we’re looking forward to your application.
