Electronic Arts

Senior Director, Application Security and Red Teaming

EA Security is seeking a senior leader to oversee our Application Security, Red Teaming, and AI Security functions. This role shapes how EA secures the technology behind our games and global operations. The scope includes advancing application security across the development lifecycle, leading adversarial testing informed by real attacker techniques, and securing AI platforms, agentic workflows, and an expanding set of AI technologies.

We are looking for a creative and adaptable leader who enjoys solving problems with an attacker’s mindset and who can drive innovation across application security, offensive testing, automation, and AI driven security approaches. This leader will collaborate with peers across the gaming, entertainment, and technology industries and partner closely with engineering, IT, product, security, and business teams to help reduce risk and strengthen EA’s overall security.

This position reports to EA’s Deputy Chief Information Security Officer (DCISO) and Vice President of Enterprise Security.

Responsibilities

• Set strategic direction for Application Security, Red Teaming, and AI Security aligned with EA’s enterprise and business objectives
  
  

• Lead and evolve EA’s Application Security function to improve review quality, reduce systemic risks, and enhance partner experience
  
  

• Direct adversarial testing across cloud services, business applications, identity systems, source control, CI/CD workflows, productivity suites, and infrastructure
  
  

• Guide research and security testing of AI systems, LLM applications, agentic workflows, and emerging platforms
  
  

• Drive innovation in attack tooling, automation, and security testing techniques informed by real adversary behavior
  
  

• Foster continuous improvement across AppSec, Red Teaming, and AI Security by encouraging experimentation and scalable testing approaches
  
  

• Develop tooling, automation, and AI driven security agents, including multi agent workflows, that scale AppSec, red teaming, and AI security capabilities
  
  

• Partner with engineering, IT, product, and cloud teams to embed security into design and development, strengthen operational practices, and drive effective remediation
  
  

• Collaborate with incident response, vulnerability management, threat intelligence, security engineering and operations to improve detection and response
  
  

• Develop high performing teams focused on coaching, accountability, and continuous learning, with capacity to take on broader responsibilities as EA’s needs evolve

Required Qualifications

• Experience leading Application Security, Red Team, or offensive security functions at enterprise scale
  
  

• Deep technical expertise in exploit development, penetration testing, and adversary simulation
  
  

• Experience evaluating and securing AI platforms, LLM based applications, and agentic workflows
  
  

• Proven ability to deliver measurable improvements in security outcomes through engineering, automation, and scalable processes
  
  

• Strong communication and leadership skills with the ability to influence engineering, product, IT, and executive stakeholders
  
  

• Experience with cloud environments, identity systems, modern application stacks, and CI/CD pipelines
  
  

• Ability to translate technical risk into business context and guide risk informed decision making

Preferred Qualifications

• Leadership experience spanning both Application Security and Red Team disciplines
  
  

• Experience building or expanding AI security capabilities
  
  

• Background in secure design, architecture, threat modeling, and scalable secure development processes, as well as detection and response validation
  
  

• Demonstrated ability to lead during major incidents or high pressure events
  
  

• Proven ability to evaluate emerging technologies and identify novel vulnerabilities
  
  

• Demonstrated success leading across multiple security functions, beyond AppSec and Red Team, and contributing to enterprise wide security strategy
  
  

• Strong partnership skills across security, engineering, product, and business teams

In the US, we offer a package of benefits including paid time off (3 weeks per year to start), 80 hours per year of sick time, 16 paid company holidays per year, 10 weeks paid time off to bond with baby, medical/dental/vision insurance, life insurance, disability insurance, and 401(k) to regular full-time employees. Certain roles may also be eligible for bonus and equity.