🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
At Rockstar Games, we create world-class entertainment experiences. Become part of a team working on some of the most rewarding, large-scale creative projects to be found in any entertainment medium - all within an inclusive, highly-motivated environment where you can learn and collaborate with some of the most talented people in the industry. Rockstar is on the lookout for a passionate Application Security Engineer who possess a passion for diving into complex software designs to identify security flaws and vulnerabilities. This is a full-time, permanent and in-office position based in Rockstar’s unique game development studio in the heart of Dundee, Scotland. WHAT WE DO The Rockstar Games Application Security team partners with numerous development teams across the company to incorporate security practices throughout the software development lifecycle. We strive to understand the threat landscape affecting our development studios, the gaming industry, and the world at large to define secure development standards and guidelines to safeguard our business and protect our players. We independently assess our application code and builds through various techniques (static analysis, dynamic analysis, software composition analysis, etc.) to identify potential vulnerabilities and design flaws and work with development teams to remediate. RESPONSIBILITIES Track trends in the security community and stay abreast of emerging threats. Provide technical security guidance to developers, team leads and producers. Create and maintain threat models of applications and features to systematically understand how they can be attacked to prioritize control development. Conduct automated and manual security assessments of applications and services. Drive remediation efforts behind internally and publicly identified vulnerabilities. Support maintaining Rockstar Games’ public and private bug bounty programs. REQUIREMENTS 3+ years of experience working in a professional, academic or research environment identifying and remediating security bugs/flaws. Strong knowledge of the principles and techniques for both manual and automated application security assessments of desktop and web applications. Good knowledge of common web security vulnerabilities (e.g., OWASP Top 10), attack techniques and remediation tactics/strategies. Good understanding of common low-level vulnerabilities (e.g. use-after-free and buffer overflows)and common mitigations. Good understanding of networking and web technologies (e.g. WebSockets, HTTPS, TCP/IP, UDP) and security controls relevant to them. Familiarity with Windows and Linux operating systems fundamentals. Familiarity with the software development lifecycle (SDLC) and working knowledge of components to secure the SLDC. Practical experience with client network traffic testing tools and techniques e.g., Burp Suite, Fiddler and Bruno. Practical experience with thick client testing tools and techniques e.g. Procmon, Strings2, Dependencies. Proficiency in C#. Excellent communication skills. PLUSES Please note that these are desirable skills and are not required to apply for the position. BSc/MSc in a computer science or related field. Background in reverse engineering and exploit research & development and relevant tools such as Ghidra, IDA, x64dbg and WinDbg. Experience with scripting and process automation. An understanding of effective practices for securing the SDLC that considers developer experience, sustainability and compliments release velocity. Experience with authentication protocols and extensions such as OAuth2 and OIDC. Experience in results-oriented, retail driven environment with strict deadlines and ship dates. Familiarity with bug bounty programs/responsible disclosure programs, either running one or as a researcher. Proficiency in C++ and JavaScript/TypeScript. HOW TO APPLY Please apply with a CV and cover letter demonstrating how you meet the skills above. If we would like to move forward with your application, a Rockstar recruiter will reach out to you to explain next steps and guide you through the process. Rockstar is committed to creating a work environment that promotes equal opportunity, dignity and respect. In line with this commitment, Rockstar will provide reasonable accommodations to qualified job applicants with disabilities during the recruitment process in order for such applicants to be considered for the position for which they are applying, as well as to qualified employees to enable them to perform the essential functions of their roles. If you need more information about Rockstar’s reasonable accommodation policies or process, or need to request an accommodation, please notify your recruiter during the interview process. If you’ve got the right skills for the job, we want to hear from you. We encourage applications from all suitable candidates regardless of age, disability, gender identity, sexual orientation, religion, belief, race, or any other protected category. #LI-AH
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.