Senior Application Security Platform Engineer at Rockstar Games
New York, NY
$121,400–$166,700
Jul 1, 2026
New York, NY
Jul 21, 2026
What this job asks for AI summary
A senior engineering role focused on embedding security practices into software development pipelines — covering static, dynamic, and composition analysis — and guiding development teams on vulnerability remediation. The work centers on architecting and maintaining secure CI/CD workflows, tuning SAST and secrets-detection tooling, and monitoring build pipeline outputs. Best suited to someone with deep hands-on experience in application security automation, CI/CD platforms, and container environments.
Senior level · 5+ years · New York-Newark-Jersey City, NY-NJ-PA · Full-time
Pay in the description: $121,400–$166,700
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $143,559 (middle half $110,181–$179,574). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
This role sits at the intersection of Application Security and Platform/DevSecOps engineering — it could reasonably be coded as Software Developers (15-1252) given the emphasis on building and architecting secure SDLC pipelines, custom rule engines, and CI/CD integrations. Information Security Analysts (15-1212) was chosen as primary because the core mission is identifying and remediating vulnerabilities across the software development lifecycle, not shipping a product.
CodeQL and Semgrep are listed as examples of 'custom rule engines' for SAST fine-tuning within the requirements section; they are treated as interchangeable named tools satisfying the same hard gate.
TeamCity and GitHub Actions are listed as interchangeable CI/CD platform options within the requirements section.
LangChain and LangGraph appear under the 'PLUSES' section, which the posting explicitly labels as desirable but not required.
Terraform and Pulumi appear under 'PLUSES' as Infrastructure as Code options.
IaC (Infrastructure as Code) is listed as a required tool category in the requirements section, but no specific IaC language is named there — specific tools (Terraform, Pulumi) only appear under Pluses, so no IaC tool is marked required.
The posting explicitly states this is in-office at Rockstar's NYC headquarters; remote is false.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.