Responsibilities
- Design, implement, and continuously improve security controls and secure baselines across cloud (AWS, Azure, GCP) and on-premise environments.
- Review infrastructure changes and new deployments through a security-architecture lens and recommend hardening before they ship.
- Verify controls are effective and drive misconfigurations and weaknesses to closure.
- Carry out, scope and oversee hands-on penetration testing to find security weaknesses in Atari’s systems and applications.
- Run hands-on scans of Atari’s infrastructure and platforms (vulnerability, cloud-posture, and configuration checks) and act on the results.
- Triage and prioritize findings and drive remediation of critical issues to closure.
- Conduct targeted vulnerability assessments and internal security audits of systems, applications, and services.
- Work directly with development teams on secure coding practices.
- Review code for vulnerabilities and give developers actionable guidance (OWASP Top 10, application security).
- Integrate security into DevSecOps pipelines and CI/CD workflows.
- Own detection and response: set detection priorities mapped to MITRE ATT&CK and direct tuning of monitoring/SIEM and managed-service coverage.
- Lead technical incident response end to end (investigation, containment, eradication, recovery, root-cause analysis) and turn findings into preventive hardening.
- Run targeted threat hunting; act as primary technical responder during business hours, backed by tooling and managed services after hours.
- Assess the security of new companies, systems, or environments brought into Atari, surfacing risk before and during integration.
- Maintain an authoritative asset inventory and attack-surface map, and bring new environments up to Atari’s hardening standards.
- Use and integrate AI-powered security tools for detection, hardening, and daily security operations, and evaluate new AI tooling as it emerges.
- Develop scripts and tooling (Python, Bash, PowerShell) to automate and scale hardening, detection, and routine operations.
- Stay current with emerging threats and attack techniques and fold them into controls and detections.
- Owns technical security decisions within agreed thresholds: approving security configurations, remediation priorities, automation scripts, and DevSecOps integrations; defining pen-test scope and security requirements for development teams; directing incident-response actions (isolation, containment, fixes); and making go/no-go security recommendations on new environments.
- Escalates to the Security & Compliance Lead beyond those thresholds.
Requirements
- Based in Newcastle or within commutable distance
- Hands-on penetration-testing experience: you have personally found security weaknesses, not only reviewed reports produced by others.
- 4–7 years of hands-on security engineering, with clear strength in security hardening and secure configuration (cloud and/or on-premise), plus working competence across vulnerability management, application security, and detection & response.
- Proven cloud security experience on at least one major platform (AWS, Azure, or GCP); comfort working across more than one.
- Strong scripting for security automation (Python, Bash, and/or PowerShell).
- Hands-on experience with SIEM, EDR, IDS/IPS, and vulnerability scanners.
- Demonstrated ability to lead technical incident response and perform root-cause analysis.
- Solid understanding of secure coding, OWASP Top 10, and application security, with credibility alongside developers.
- Experience overseeing external security testing vendors and driving remediation to closure.
- Familiarity with AI-powered security tools for detection, analysis, and hardening.
- Working knowledge of network security, encryption, and authentication/identity protocols.
- Strong collaboration across cloud, IT, and development teams, with meticulous attention to detail and strong analytical skills.
Nice to Have
- Security due diligence: assessing or integrating new companies or environments.
- Background in the gaming or entertainment industry.
- Threat hunting and proactive security monitoring experience.
- Security orchestration and automation (SOAR) platforms.
- Infrastructure-as-code security (Terraform, CloudFormation) and container/Kubernetes security.
- AI/ML security tooling, or building AI-assisted security automation.
Work Arrangement
Remote (City/Region) — Newcastle
Additional Information
- After-hours monitoring is supported by tooling and managed services, so this is not a one-person, round-the-clock SOC.
- EEO Statement: Atari is an equal opportunity employer and we are committed to providing a workplace free from harassment and discrimination. We are committed to equal employment regardless of race, religion or lack thereof, color, national origin, gender, sexual orientation, gender identity or expression, age, marital status, medical condition, veteran status, ancestry, disability status, pregnancy, parental status, genetic information, political affiliation, or any other status protected by the laws or regulations in the locations where we operate.
