Lead Security Server Engineer

Scopely is looking for a Lead Security Server Engineer on an unannounced AAA cross-platform game in Culver City on a hybrid basis or remotely in the US or Canada. 

We're seeking an experienced Server Engineer with 7+ years of server-side development experience and a proven track record in game security who can build secure and scalable backend systems for our  unannounced AAA cross-platform game. By joining our team, you'll leverage your expertise in encryption, authentication systems, and security countermeasures to champion player safety and fair play, while driving technical excellence across the project.

At Scopely, we care deeply about what we do and want to inspire play, every day - whether in our work environments alongside our talented colleagues, or through our deep connections with our communities of players. We are a global team of game lovers who are developing, publishing and innovating the mobile games industry, connecting millions of people around the world daily.

What you will do:

• Design and implement secure backend services/APIs in a language like Go or Java; review PRs for security and performance.

• Own authn/authz systems (OAuth2/OIDC, session/token lifecycle, RBAC/ABAC); add MFA where appropriate.

• Build secure message validation.

• Implement encryption in transit/at rest (mTLS, TLS, KMS key rotation, envelope encryption).

• Integrate server-authoritative checks and cheat-detection signals; establish and maintain interfaces for easy management.

• Run threat modeling and security design reviews for new features; document mitigations and risks.

• Build anti-abuse/anti-bot controls (rate limits, IP reputation, challenge flows) and monitor effectiveness.

• Create and maintain technical documentation

• Mentor engineers and drive the server security roadmap aligned with compliance and data-handling needs.

What you will need:

• 7+ years of server-side development experience

• 2+ years of experience in game security or a related field

• Proven track record of building secure, scalable server systems in a language like Java, Go, or similar languages

• Familiarity with cloud deployment (AWS, GCP) using Docker or other modern container deployment strategies

• Strong background in client-server communication protocols and modern encryption

• Proficiency in developing authentication and authorization systems

• Experience implementing secure message validation systems

• Understanding of game security threats and countermeasures

• Strong communication skills to coordinate with cross-functional teams

Bonus points:

• Knowledge of integrating security systems with dedicated game servers

• Understanding of modern game engine architecture

• Familiarity with common cheating techniques and countermeasures

• Knowledge of secure software development lifecycle

For candidates in CA, CO, NJ, NY, and WA, the annual salary range is provided below. In addition to base pay, employees may be eligible for equity, bonuses, and a comprehensive benefits package, including healthcare benefits, retirement benefits, pet insurance, paid holidays, paid Scopely free days, and unlimited paid time off. Base pay offered may vary depending on job-related knowledge, skills, and experience.

CA, CO, NJ, NY, and WA Annual Salary Range

$169,600—$253,000 USD