Condé Nast Technology Lab

Application Security - Engineer IV

- This assessment gives us an idea of your C++ skills - Companies that evaluate this skillset in interviews: Rockstar Games, Ubisoft, Mayhem Studios, etc. - 10 Multiple Choice questions - Average time to complete: 7 to 10 minutes

Let's assess your Data Structures! 📋 &nbsp;- This assessment gives us an idea of your problem solving skills using DSA - Companies that evaluate this skillset in interviews: MPL, LILA Games, GSN Games, etc. - 10 Multiple Choice questions - Average time to complete: 7 to 10 minutes

Let's assess your Programming Patterns! 📋- This assessment gives us an idea of your code architecture skills - Companies that evaluate this skillset in interviews: Dirtcube, PTW, Playshifu, etc. - 10 Multiple Choice questions - Average time to complete: 7 to 10 minutes

Let's assess your OOPs skills! 📋- This assessment gives us an idea of your fundamental OOPS concepts and Solid principles skills - Companies that evaluate this skillset in interviews: Hitwicket, GSN Games, Tomo Club, etc. - 10 Multiple Choice questions - Average time to complete: 7 to 10 minutes

Let's assess your Unity Skills 📋 - This assessment gives us an idea of your Unity fundamentals - Companies you can apply for after taking this assessment: Godspeed games, Salvation Games, nCore Games, etc. - 9 questions: 9 Multiple Choice - Minimum score needed to qualify: 80% - Average time to complete: 5 to 10 minutes

Cloud Imperium Games

Technical Artist

Trek

Sales Lead

Studio Drydock

Entry-Level 3D Artist

ByteDance

Quality Assurance Specialist - Global Payment

HoYoverse

Accountant (Accounts Payable)

Easygo

Poker Room Manager

Operations Executive

Security Engineer - Application/Product Security, APAC

Content Moderator - CapCut (Thai)

As a Vehicle Technical Artist at CIG, you'll be part of a team creating high-fidelity vehicle assets for Star Citizen and Squadron 42.  Responsibilities include hands-on implementation, performance optimization, rigging, skinning, asset markup, and supporting the vehicle content team. You will work closely with art and programming teams, develop and improve pipelines using tools like 3DS Max, MaxScript, and Python, and investigate new techniques. The role involves bringing ships to life through animation and physics tuning, and ensuring assets are technically sound for use in the games.  CIG has a reputation for creating complex, characterful vehicles that are more like mini-game levels, and you'll be contributing to their already impressive library of nearly one hundred ships.

We are developing Star Citizen and Squadron 42 across 5 studios in Los Angeles, Austin, Manchester, and Frankfurt.

Audio Director

Facial Animator

Props Artist

QA Tester

Senior Systems Designer

Legal Coordinator / Legal Manager

Embedded QA Tester

Physics Programmer

Level Design III

<div data-automation-id="jobPostingDescription" class="css-z3h7ab">We are a crowdfunded company and have a dedicated and enthusiastic community of backers who are helping us create the “Best Damn Space Sim Ever”. We want to build the best we can deliver and we believe wholeheartedly in the value of exceptional diverse talent.As a Vehicle Technical Artist at CIG you will be joining a robust team of world-class 3D Artists, Engineers and Designers who are creating some of the most unique, high fidelity vehicle assets seen in games to date.You will be an integral part of the creation process for vehicles in Star Citizen and Squadron 42, getting involved with hands on implementation, performance optimisation, rigging, skinning, asset markup and supporting the rest of the vehicle content team in producing these complex and unique vehicles for the game.Working on the Vehicles within Star Citizen and Squadron 42 will mean working with a team that has distinguished itself for its creativity and ability to deliver nearly a hundred ships so far and these are much more than just simple vehicles in the game, they have an identity and characters and are to scale that they are more easily compared to entire multiplayer levels, that happen to fly around too.Founded in 2012 by renowned game developer Chris Roberts, Cloud Imperium Games (CIG) is one of the largest global independent studios, dedicated to delivering next-generation AAA games. CIG prides itself in thinking outside the box, encouraging creativity and developing ground-breaking technology. CIG believes in raising the bar for the gaming industry and the community as a whole.&nbsp; &nbsp;For more information about life at Cloud Imperium Games, check this out - <a rel="noopener noreferrer" target="_blank" href="https://l.shitrk.com/r/e/2XxJACaX0KrC7L4l?r=https://youtu.be/cXjp7SRBpIA">https://youtu.be/cXjp7SRBpIA</a>What does a Technical Artist at CIG do?<ul><li>Work closely with the Art Groups and Programmers to effectively produce technically correct art content.</li><li>Bring ships to life with a mixture of rigging, animating and physics tuning using 3DSMax.</li><li>Help shape and evolve art pipelines, including proprietary tools, software, plug-ins, and game technology.</li><li>Writes new MaxScript, Python tools in 3DS Max and into our game engine, to enhance pipeline.</li><li>Check assets in terms of technical setup for their usage in Star Citizen and Squadron 42.</li><li>Investigates new techniques, assists in prototyping, and helps other developers with technical roadblocks.</li><li>Supporting our growth culture and advocating knowledge sharing.</li></ul>What do we expect from our Technical Artists?<ul><li>Someone who is passionate about innovation, improving pipelines, developing new tools, and adapting to new technologies.</li><li>Demonstrate relevant experience in the game development industry.</li><li>Experience in 3DS Max/Maya and Photoshop.</li><li>Comfortable working with scripting and programming languages.</li><li>Someone who loves to be part of a passionate team and can communicate effectively.</li></ul>Diversity Statement CIG is a global company, staunchly committed to cultivating a culture and workplace that celebrates all backgrounds, lifestyles, and perspectives. Together, we are creating a space where authentic recognition, appreciation, and understanding of the importance of diversity is fostered by everyone. As an Equal Opportunity Employer, we strive to build a team that represents all walks of life, and we want every employee to bring all the things that make them unique to the work environment. The universe is as vast and varied as the people in it, and it’s our differences that make it special.&nbsp;Fraud Statement We are aware of people receiving job offers that fraudulently allege to be from CIG. These types of fraud can be carried out through false websites, fake email addresses claiming to be from our company, or social media. We do not ask for your personal info like bank account numbers, identification numbers, etc through social media or chat-based apps, nor do we request or send money for the purchase of business equipment.If you suspect fraud, please report it to your local authorities, as well as reaching out to us at&nbsp;info[@]cloudimperiumgames.com&nbsp;with any information you may have.If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!</div>

Paid - Game Dev Bootcamp

Paid - Fullstack Game Development Bootcamp

Follow Mayank - career advice

Follow Mayank Grover for game development resources

For Laid-Off Gaming Professionals

Scholarship for Laid Off Gaming Professionals

For College Students

Scholarship for College Students

Free | C# | Midnight Pizza Fight

Free | C++ | Lethos

Free | C++ | Pong

Paid - Game Programming Patterns

Paid - Game Programming with Programming Patterns

Scholarship for Laid-Off Gaming Professionals

Follow Abhishek - tech content

Follow Abhishek Smith for game programming content

This assessment gives us an idea of your C++ skills- Companies that evaluate this skillset in interviews: Rockstar Games, Ubisoft, Mayhem Studios, etc.- 10 Multiple Choice questions- Average time to complete: 7 to 10 minutes

Let's assess your Data Structures! - This assessment gives us an idea of your problem solving skills using DSA- Companies that evaluate this skillset in interviews: MPL, LILA Games, GSN Games, etc.- 10 Multiple Choice questions

Data Structures and Algorithms

Let's assess your Programming Patterns! ????- This assessment gives us an idea of your code architecture skills- Companies that evaluate this skillset in interviews: Dirtcube, PTW, Playshifu, etc.

Programming Patterns

Let's assess your OOPs skills! ????- This assessment gives us an idea of your fundamental OOPS concepts and Solid principles skills- Companies that evaluate this skillset in interviews: Hitwicket, GSN Games, Tomo Club, etc.

Object Oriented Programming

Let's assess your Unity Skills ????- This assessment gives us an idea of your Unity fundamentals- Companies you can apply for after taking this assessment: Godspeed games, Salvation Games, nCore Games, etc.

Unity Game Engine

Condé Nast seeks an Application Security Engineer IV with 5+ years of experience in Application Security and DevSecOps. Must have expertise in Secure Development Lifecycle, CI/CD, OWASP Top 10, Threat Modeling, and experience in a global organization. Knowledge of cloud, containers (Kubernetes, AWS, Docker, AWS EKS), GitHub, and security tooling is essential.

<div class="jobs-box__html-content jobs-description-content__text t-14 t-normal
 jobs-description-content__text--stretch" id="job-details" tabindex="-1">
 <h2 class="text-heading-large">
 About the job
 </h2>

 <div class="mt4">
 
 JOB DESCRIPTION Condé Nast is a global media company, home to iconic brands including Vogue, The New Yorker, GQ, Glamour, AD, Vanity Fair and Wired, among many others. The company's award-winning content reaches 84 million consumers in print, 367 million in digital and 379 million across social platforms, and generates more than 1 billion video views each month. The company is headquartered in London and New York, and operates in 32 markets worldwide, including China, France, Germany, India, Italy, Japan, Mexico &amp; Latin America, Russia, Spain, Taiwan, the U.K. and the U.S, with local licensed partners across the globe. The Cyber Security Team provides the security services that underpin Conde Nast’s security posture and enhance the organisation's security profile. The Cyber Security Team is responsible for; Information Security and Cyber Risk management, Security Operations and the global SOC, Security Architecture and Application Security as well as Security Engineering. This role sits within the Cyber Security team reporting into the Security Architecture and Engineering Manager and provides the team with application security expertise that will allow the team to fully engage with the Development and Engineering teams and work with them to embed security into their development lifecycle. The successful candidate will own and manage Cyber Security relationships with key stakeholders within the Platform, Development and Engineering teams. Conde Nast employs a large development team that develops around 250 products or services across the business which are predominantly consumed by our customers across the globe. As such we have a massive focus on ensuring all products we build and develop are done so securely. We are seeking someone who is an SME in the areas of Application Security and DevSecOps and has worked in a lead role within a global organisation for a number of years.The candidate will ideally come from a development background and will have demonstrable expertise in Application Security, DevSecOps, S-SDLC and relevant CI/CD methodologies. The applicant will act as the lead on all Application Security initiatives as well as initiatives which support securing the overall development lifecycle. They will use their expertise to identify security gaps in our current application development lifecycle and processes and propose remedies to improve security throughout the lifecycle. Additionally they will support with recommendations to shift security left such as to support us to operate in a truly dedicated DevSecOps manner.The applicant should have an understanding of Application Threat modelling methodologies and will have experience of performing Threat modelling having previously used various tools in performing these.The applicant should look to actively promote adoption and use of such methodologies and ensure security requirements are understood and embedded into the development lifecycle. Duties: <ul><li>Work collaboratively with Product, Engineering and Global Architecture teams to identify vulnerabilities at the design stage. </li><li>Engage regularly with development teams to discuss any security concerns relating to products or applications.</li><li>Act as an SME on application vulnerabilities and support with detailing remediation steps to developers. Provide advice where required to assist with remediation.</li><li>Perform manual testing to ascertain whether vulnerabilities are true positives and validate automated test scan results if required.</li><li>Administer and maintain our SCA, SAST, IaC, Container and DAST security solutions, ensuring tooling is fit for purpose and providing value, as well as new features are being utilised. </li><li>Support with onboarding development teams onto security tooling and integrating tools into their CI/CD pipeline, ensuring their applications are regularly being scanned for vulnerabilities.</li><li>Drive security improvements and enhancements within the products and applications Conde Nast develops.</li><li>Identify gaps in our application security controls and make recommendations for improvements to tooling or processes to resolve the gaps and improve security.</li><li>Support with Code Reviews/Analysis. Knowledge of Java, Java Script and NodeJs is essential.</li><li>Support with arranging third party penetration testing against key applications or services.</li><li>Provide business stakeholders and the GRC team with reporting on application vulnerabilities and KRI’s across our application portfolio.</li><li>Develop and maintain all documentation for our Application Security Tooling, including processes and procedures for onboarding and offboarding teams and utilising tools in general.</li><li>Regularly update and maintain our Application Security standards, best practices and guidelines within Confluence to ensure developers have a central location to reference.</li></ul>
 Required Skills:To be successful, the candidate will need to have and demonstrate the following knowledge, skills and experience, along with a proactive focused attitude; <ul><li>Minimum 5 years experience in Application Security and Engineering.</li><li>Minimum 5 years experience in Secure Development Lifecycle</li><li>Thorough knowledge of CI/CD and DevSecOps principles.</li><li>Awareness of application security flaws and web application best practices (e.g. OWASP Top 10, CWE SANS Top 25) </li><li>Understanding of STRIDE, or other Threat modelling or applicable methodologies</li><li>Experience of working in a geographically dispersed organisation with varied stakeholders.</li><li>Experience of implementing security within a DevOps environment i.e. adopting a shift-left approach within Application Security.</li><li>Knowledge of cloud and containers essential (Kubernetes, AWS, Docker, AWS EKS)</li><li>Experience of having worked with GitHub and GitHub actions is essential.</li><li>Experience of using Static and Dynamic Code Analysis tools (Snyk and Rapid 7 AppSec are beneficial)</li><li>Awareness and experience of the NIST framework and PCI-DSS Standard.</li><li>Experience of container vulnerability scanning or securing containers.</li><li>Experience of programming / development technologies, (this will be tested at interview)</li><li>Experience of AWS WAF implementation and AWS services in general.</li><li>Good communication, presentation and written language skills.</li><li>Knowledge of development methodologies e.g. Agile</li></ul>
 Educational Qualifications: <ul><li>BS Computer Science or similar qualification </li><li>Application Security certifications (CEH, CASE, CSSLP or similar)</li></ul>

 
 </div>
 </div>