Infrastructure & Endpoint Security Engineer

Devoted Studios is a globally remote game development company specializing in Co-development, Porting, and End-to-End Art Production for the global gaming industry. We collaborate across time zones to support projects on all major platforms, engines and styles - from AAA titles to emerging technologies. Our team includes world-class talents who bring deep expertise in external development, pipeline optimization, and creative problem-solving. Whether it’s porting games to new systems, enhancing gameplay features, or crafting stunning visuals, Devoted Studios operates as a trusted, flexible extension of our partners’ internal teams. We are proud to be the development partner of choice for industry leaders such as: - Epic - Xbox - Meta - Obsidian Entertainment - Riot - Gearbox Software We are looking for a driven and detail-oriented **Infrastructure & Endpoint Security Engineer** to help us protect our people, infrastructure, and data. You'll design secure systems, monitor for threats, respond to incidents, and build a culture of security awareness across the organization - bridging the gap between technical defense and human behavior. ### Key Responsibilities - Design and maintain secure network and infrastructure architecture; - Configure and manage firewalls, VPNs, access controls, and network segmentation; - Secure servers, cloud resources, containers, and virtual machines; - Secure employee workstations and enforce security baselines; - Monitor endpoints and infrastructure for suspicious activity; - Collect, analyze, and correlate security logs; - Detect, investigate, and respond to security incidents; - Perform vulnerability analysis, risk assessment, and remediation; - Conduct system and network hardening; - Develop and deliver internal security trainings and awareness sessions; - Manage and maintain security training platforms and learning content; - Organize phishing simulations and awareness campaigns; - Collaborate with IT, DevOps, Infrastructure, and HR teams; - Complete and review clients security questionnaires and security assessment forms to demonstrate the company’s security posture; - Participate in security and compliance calls with client information security specialists and stakeholders. **Monitoring & Incident Response:** - Set up and maintain security monitoring and alerting; - Investigate anomalies and security incidents; - Perform root-cause analysis and post-incident reviews; - Improve detection, response, and prevention processes. **Security Awareness & Training:** - Plan and deliver security awareness programs; - Manage training platforms and user enrollment; - Track training completion and effectiveness; - Continuously improve training materials based on incidents and risks. **Required hard skills:** - Strong understanding of network security (LAN, WAN, VPN, firewalls, IDS/IPS, proxies); - Experience securing infrastructure (on-prem, cloud, hybrid environments); - Knowledge of Zero Trust and least-privilege access models; - Experience with endpoint security (EDR, antivirus, disk encryption); - OS security knowledge: Windows, macOS, Linux; - Experience with monitoring and logging systems (endpoints, servers, network traffic); - Understanding of authentication, authorization, IAM; - Experience with security hardening and patch management; - Familiarity with security awareness and training platforms; - Basic scripting skills (Bash, PowerShell, Python); - Understanding of networking protocols (TCP/IP, DNS, HTTP/S); - Good English skills. **Required soft skills:** - Ability to explain security concepts to non-technical users; - Strong communication and presentation skills; - Proactive and security-first mindset; - High attention to detail; - Ability to influence user behavior and promote security culture. **Why Join Us?** **We offer:** - Strong and enthusiastic team – you will have the opportunity for knowledge sharing, learning, and professional self-development. - Direct collaboration with the Finance D…