{"id":3978150,"url":"https://alion.io/job/nintendo-application-security-engineer","title":"Application Security Engineer","company":{"id":12646,"name":"Nintendo","domain":"nintendo.com","url":"https://alion.io/company/nintendo-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":79,"open_postings":13,"ghost_share":0,"stale_share":0.846,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Redmond, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":108450,"max":173550,"currency":"USD","period":"year","gross":null,"usd_annual":173550},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"Function Calling","optional":false},{"name":"Kong","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-09T18:19:20Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T18:50:28Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Nintendo of America\nAbout Nintendo of America: From the launch of the Nintendo Entertainment System™ more than 30 years ago, Nintendo’s mission has been to create smiles through unique entertainment experiences. Here at Nintendo of America Inc., we deliver on this mission by partnering closely with Nintendo Co., Ltd., to bring Nintendo’s iconic and cherished franchises including Mario™, Donkey Kong™, The Legend of Zelda™, Metroid™, Animal Crossing™, Pikmin™ and Splatoon™ across the Americas through our video games, hardware systems, and collaborations with partners on a range of other entertainment initiatives like feature films and theme parks.\nWe are an equal opportunity employer offering a welcoming and inclusive environment in service to one another, our products, and the diverse consumers and communities we call home. For more information about Nintendo, please visit the company’s website at https://www.nintendo.com/. \nSUMMARY:\nThis role is part of the IT: Information Security department at Nintendo of America (NOA) and provides hands-on application and AI security engineering for enterprise applications, APIs, cloud services, and AI-enabled solutions. Partners with developers to assess risks, improve secure designs, and build automated security capabilities across the software development lifecycle. \nDESCRIPTION OF DUTIES\nApplication Security Performs security assessments, threat modeling, architecture reviews, and secure code reviews for enterprise applications, APIs, and cloud services. \nEvaluates authentication, authorization, data protection, secrets management, and other application controls; partners with developers to prioritize and validate remediation. \nDevelops reusable secure design patterns and provides practical secure coding guidance throughout the software development lifecycle. \nSupports investigation and remediation of application and API security incidents. \n\n AI Security Assesses AI-enabled applications, including large language models (LLMs), retrieval-augmented generation (RAG), agents, and connected tools or Model Context Protocol (MCP) integrations. \nIdentifies and helps mitigate prompt injection, sensitive information disclosure, insecure output handling, excessive permissions, and unsafe tool use. \nPartners with application, cloud, and AI teams to implement least privilege, data protection, security testing, and technical guardrails; translates emerging threats into practical recommendations. \nEstablishes security review criteria for new AI use cases, including data classification, data handling, model and vendor risk, and approval conditions aligned with AI governance processes and frameworks such as NIST AI RMF and OWASP guidance for LLM applications. \nReviews identity, access, and logging for AI agents, service accounts, and connected tools, ensuring agent actions are authorized, observable, and auditable. \nPartners with peer security engineers to define detection and response for AI-related threats. \n\nSecurity Engineering & Automation Builds and integrates security testing into CI/CD pipelines and developer workflows, including static and dynamic testing, dependency analysis, secrets detection, and API testing. \nDevelops scripts, tools, and integrations to streamline vulnerability analysis, remediation tracking, and repeatable security processes; evaluates responsible uses of AI to improve these capabilities. \nMaintains and troubleshoots security solutions, evaluates new technologies, and ensures work aligns with established compliance requirements and internal controls. \n\nSUMMARY OF REQUIREMENTS\nMinimum of five (5) years of related experience in application security, security engineering, software engineering, or a related technical security discipline. \nExperience with application assessments, threat modeling, architecture reviews, secure code reviews, and common application vulnerabilities and defenses. \nUnderstanding of web applications, APIs, cloud services, authentication, authorization, secrets management, and data protection. Ability to read application code; experience with security testing tools, CI/CD pipelines, and automated security checks. \nStrong communication skills, including translating technical risks into clear recommendations for technical and non-technical audiences. \nFoundational understanding of generative AI (ex. CoPilot, Claude), LLM-enabled applications, and related security risks, or demonstrated ability to develop that knowledge quickly.\nExperience with cloud platforms (AWS), API penetration testing, microservices, containers (Kubernetes), in multi-team enterprise environments.\nFamiliarity with AI risk and governance frameworks and common AI threats (ex. OWASP), such as prompt injection, data leakage, model or supply chain compromise, and misuse of autonomous agents preferred. Practical AI security experience preferred.\nExperience with Python or another scripting language preferred.\nUndergraduate degree in Computer Science, Cybersecurity, Software Engineering, a related field, or equivalent combination of education and experience. \n\nApplicants must be legally eligible to work in the United States to be considered. Visa sponsorship is not available for this role.\nThis position is hybrid in Redmond, WA. Hybrid positions require regular onsite work following the schedule and guidelines for their division. This position is not open to fully remote status at this time. \nThis position includes the base pay range listed below, potential for a semi-annual discretionary performance bonus, and a comprehensive benefits package that includes medical, dental, vision, 401(k), and paid time off.\nPay Range:\n$108,450—$173,550 USD","description_format":"text","description_chars":5682,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Mobile Games","Console Games","Gaming Consoles"],"lifecycle":[{"event":"open","at":"2026-11-09T18:50:28Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 7 · green card filings: 1","filings_12m":7,"filings_prev_12m":10,"green_card_filings_12m":1,"median_offered_wage_usd":180625,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":53,"reasons":["conf:0","win:early"],"computed_at":"2026-11-09T19:12:13Z"},"pay":{"stated_usd_annual":173550,"is_top_pay":true},"html_url":"https://alion.io/job/nintendo-application-security-engineer","json_url":"https://alion.io/job/nintendo-application-security-engineer.json","meta":{"generated_at":"2026-11-09T19:12:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4726,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":12646},"rest":"https://alion.io/mcp/rest/get_company?id=12646"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnintendo-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnintendo-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnintendo-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nintendo-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnintendo-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3978150}},{"tool":"search_jobs","arguments":{"company":"nintendo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3978150},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}