Information Security Engineer

About the role

Take‑Two Interactive is seeking an Information Security Engineer to strengthen the security posture across its technology stack. The role involves collaborating with infrastructure, security engineering, operations, and architecture teams to design, implement, and maintain security controls for endpoints, networks, cloud environments, and data.

Key responsibilities

• Manage EDR, DLD, CSPM, and NSM solutions for enterprise endpoints, virtualization, cloud, and network security.
• Identify misconfigurations, close security control gaps, and automate asset discovery across the enterprise network and cloud.
• Monitor security events, respond to alerts, and process technical change requests for infrastructure and engineering teams.
• Ensure compliance with security KPIs and risk indicators, and participate in on‑call incident response as needed.
• Map defenses to frameworks such as MITRE ATT&CK and OWASP, and develop mitigation strategies for Take‑Two assets.
• Use project management tools for tracking objectives and scoping work.
• Draft and maintain security policies, standards, and technical documentation aligned with NIST, CIS, and ISO 27001.
• Support the risk management program by reviewing endpoint, network, and cloud configurations, patching, and vulnerability scans.

Required profile

• Strong analytical mindset with a focus on security architecture and operations.
• Ability to work cross‑functionally with studio and infrastructure teams.
• Willingness to stay current with emerging threats and security technologies.

Required skills

• Experience with EDR, DLD, CSPM, and NSM tools.
• Knowledge of MITRE ATT&CK, OWASP, NIST, CIS, and ISO 27001 frameworks.
• Vulnerability management and remediation.
• Firewall change request assessment.
• Security monitoring and incident response.