Gaming Threat Intelligence Analyst

INFOSEC

What We Do

Keep Epic’s networks, hardware, and people safe from security risks. Install security measures and operate software to protect systems and information infrastructure, including firewalls and encryption programs. Document issues as they arise and assess & report any impact caused.

What You'll Do

We're seeking a Gaming Threat Intelligence Analyst to identify, investigate, and disrupt the people who cheat, defraud, or abuse Epic's games and players. You'll track cheat developers, account sellers, and fraud operations back to the people and infrastructure behind them, then work with Ecosystem Security and Legal to turn that research into mitigations, enforcement, and legal action. This role owns investigations from first lead to finished report with minimal oversight.

In this role, you will

• Investigate cheat developers, sellers and resellers, account sellers, tournament cheaters, DDoS providers, and exploit developers targeting Epic's games
• Identify the people, networks, and infrastructure behind cheat products and fraud schemes, not only the products themselves
• Investigate fraud and abuse across the ecosystem, including V-Bucks fraud, Support-A-Creator fraud, and map payout fraud
• Monitor cheat communities and underground markets for new features, techniques, and trends, and feed findings into technical mitigations and enforcement decisions
• Track account compromise methods and social programming tactics used against players
• Research and maintain Epic's gaming threat landscape, including the leading threat actors, their methods, and where they are likely to move next
• Prioritize actors by impact and build evidence packages that support takedowns, payment disruption, and litigation, and support Legal throughout the legal process
• Work with external intel partners on reporting, cheat testing, and attribution, and exchange intelligence with gaming industry peers
• Support incident response with research on cheats, exploits, compromised accounts, and leaks
• Write case reports and contribute to quarterly threat reporting, and own small projects from the team backlog end to end

What we're looking for

• 4+ years of experience in threat intelligence, online investigations, anti-cheat, fraud, or trust and safety
• Working knowledge of how cheat, account selling, or fraud ecosystems operate
• Strong OSINT skills, including pivoting on handles, accounts, storefronts, payment details, domains, and hosting
• Experience with threat intelligence platforms such as Flashpoint, Recorded Future, or similar
• Comfortable querying data in SQL or Splunk, with basic Python
• Organized case management (Jira or similar) and evidence documentation that holds up to legal review
• Clear report writing for technical, legal, and leadership audiences
• Availability for on-call rotation

This role is open to multiple locations in North America (including CA & WA).

Pay Transparency Information

The expected annual base pay range(s) for this position are detailed below. Each base pay range is relevant only for individuals who are residents of or will be expected to work within the specified locale. Compensation varies based on a variety of factors, which include (but aren’t limited to) things such as skills and competencies, qualifications, knowledge, and experience. In addition to base pay, most employees are eligible to participate in Epic’s generous benefit plans and discretionary incentive programs (subject to the terms of those plans or programs).

California Base Pay Range 105756 - 155109 USD
Washington Base Pay Range 96142 - 141008 USD