Formerly Niantic, Scopely's Security Team seeks a Senior Security Engineer to improve the security posture of our software development lifecycle, applications, and build infrastructure.

Niantic, known for global hits like Pokémon GO, Monster Hunter Now, and Pikmin Bloom is now part of Scopely, home to games like Monopoly GO!, Stumble Guys, and Star Trek Fleet Command. Together, we engage billions of players worldwide, and we need your expertise to keep them safe!

Do you want to help secure one of the most widely used gaming platforms on the planet? We seek creative and dedicated engineers with excellent technical judgment, strong interpersonal skills, and an eagerness to embrace new technologies.

Responsibilities 

• Perform security reviews and audits of platform and application software throughout design and launch.
• Provide guidance and expertise to product and operations teams across Scopely.
• Build automation and tooling that amplify the Security Team’s impact and improve the developer experience.
• Drive initiatives in security architecture, application scanning, fuzzing, and other proactive defenses.
• Contribute to hardening efforts across in-house libraries, CI/CD systems, and cloud/container environments.
• Be responsible for third-party library reviews and manage vulnerability remediation.
• Educate engineers on secure coding practices and help standardize security across teams.
• Engage in red-team exercises and coordinate with internal teams and external pentesting partners.

Qualifications

• 5+ years of experience in a global company with cloud-centric infrastructure (preferably GCP).
• You have in-depth experience in hardening distributed web services, cloud services and platform architectures.
• You can demonstrate strong programming skills (preferably Go or Java) and a deep understanding of common vulnerability classes and exploitation patterns across modern stacks.
• Excellent communication skills and experience collaborating across distributed teams.

Plus If...

• Have participated in red-team operations or managed mitigation tracking.
• Possess deep familiarity with build systems, artifact repositories, or large-scale infrastructure.
• Have delivered privacy-focused solutions for user-facing services.
• Have experience in code quality management or security champion programs.
• Have worked in a customer-centric engineering culture and value pragmatic, scalable solutions.