Infrastructure & Endpoint Security Engineer

Devoted Studios is a globally remote game development company specializing in Co-development, Porting, and End-to-End Art Production for the global gaming industry.

We collaborate across time zones to support projects on all major platforms, engines and styles - from AAA titles to emerging technologies. Our team includes world-class talents who bring deep expertise in external development, pipeline optimization, and creative problem-solving. Whether it’s porting games to new systems, enhancing gameplay features, or crafting stunning visuals, Devoted Studios operates as a trusted, flexible extension of our partners’ internal teams. We are proud to be the development partner of choice for industry leaders such as:

• Epic
• Xbox
• Meta
• Obsidian Entertainment
• Riot
• Gearbox Software

We are looking for a driven and detail-oriented Infrastructure & Endpoint Security Engineer to help us protect our people, infrastructure, and data. You'll design secure systems, monitor for threats, respond to incidents, and build a culture of security awareness across the organization - bridging the gap between technical defense and human behavior.

Key Responsibilities

• Design and maintain secure network and infrastructure architecture;
• Configure and manage firewalls, VPNs, access controls, and network segmentation;
• Secure servers, cloud resources, containers, and virtual machines;
• Secure employee workstations and enforce security baselines;
• Monitor endpoints and infrastructure for suspicious activity;
• Collect, analyze, and correlate security logs;
• Detect, investigate, and respond to security incidents;
• Perform vulnerability analysis, risk assessment, and remediation;
• Conduct system and network hardening;
• Develop and deliver internal security trainings and awareness sessions;
• Manage and maintain security training platforms and learning content;
• Organize phishing simulations and awareness campaigns;
• Collaborate with IT, DevOps, Infrastructure, and HR teams;
• Complete and review clients security questionnaires and security assessment forms to demonstrate the company’s security posture;
• Participate in security and compliance calls with client information security specialists and stakeholders.

Monitoring & Incident Response:

• Set up and maintain security monitoring and alerting;
• Investigate anomalies and security incidents;
• Perform root-cause analysis and post-incident reviews;
• Improve detection, response, and prevention processes.

Security Awareness & Training:

• Plan and deliver security awareness programs;
• Manage training platforms and user enrollment;
• Track training completion and effectiveness;
• Continuously improve training materials based on incidents and risks.

Required hard skills:

• Strong understanding of network security (LAN, WAN, VPN, firewalls, IDS/IPS, proxies);
• Experience securing infrastructure (on-prem, cloud, hybrid environments);
• Knowledge of Zero Trust and least-privilege access models;
• Experience with endpoint security (EDR, antivirus, disk encryption);
• OS security knowledge: Windows, macOS, Linux;
• Experience with monitoring and logging systems (endpoints, servers, network traffic);
• Understanding of authentication, authorization, IAM;
• Experience with security hardening and patch management;
• Familiarity with security awareness and training platforms;
• Basic scripting skills (Bash, PowerShell, Python);
• Understanding of networking protocols (TCP/IP, DNS, HTTP/S);
• Good English skills (B2+).

Required soft skills:

• Ability to explain security concepts to non-technical users;
• Strong communication and presentation skills;
• Proactive and security-first mindset;
• High attention to detail;
• Ability to influence user behavior and promote security culture.