Infrastructure & Endpoint Security Engineer

Devoted Studios is a globally remote game development company specializing in Co-development, Porting, and End-to-End Art Production for the global gaming industry. We collaborate across time zones to support projects on all major platforms, engines and styles - from AAA titles to emerging technologies. Our team includes world-class talents who bring deep expertise in external development, pipeline optimization, and creative problem-solving. Whether it’s porting games to new systems, enhancing gameplay features, or crafting stunning visuals, Devoted Studios operates as a trusted, flexible extension of our partners’ internal teams. We are proud to be the development partner of choice for industry leaders such as: Epic Xbox Meta Obsidian Entertainment Riot Gearbox Software We are looking for a driven and detail-oriented Infrastructure & Endpoint Security Engineer to help us protect our people, infrastructure, and data. You'll design secure systems, monitor for threats, respond to incidents, and build a culture of security awareness across the organization - bridging the gap between technical defense and human behavior.

Key Responsibilities Design and maintain secure network and infrastructure architecture; Configure and manage firewalls, VPNs, access controls, and network segmentation; Secure servers, cloud resources, containers, and virtual machines; Secure employee workstations and enforce security baselines; Monitor endpoints and infrastructure for suspicious activity; Collect, analyze, and correlate security logs; Detect, investigate, and respond to security incidents; Perform vulnerability analysis, risk assessment, and remediation; Conduct system and network hardening; Develop and deliver internal security trainings and awareness sessions; Manage and maintain security training platforms and learning content; Organize phishing simulations and awareness campaigns; Collaborate with IT, DevOps, Infrastructure, and HR teams; Complete and review clients security questionnaires and security assessment forms to demonstrate the company’s security posture; Participate in security and compliance calls with client information security specialists and stakeholders. Monitoring & Incident Response: Set up and maintain security monitoring and alerting; Investigate anomalies and security incidents; Perform root-cause analysis and post-incident reviews; Improve detection, response, and prevention processes. Security Awareness & Training: Plan and deliver security awareness programs; Manage training platforms and user enrollment; Track training completion and effectiveness; Continuously improve training materials based on incidents and risks.