Nintendo
Security Engineer (Cloud)
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Nintendo
Nintendo Co., Ltd. is a leading Japanese video game company based in Kyoto, founded in 1889. Originally a manufacturer of hanafuda playing cards, Nintendo has evolved into a global leader in interactive entertainment, focusing on innovative gaming systems and software. The company has a rich history, transitioning from traditional card games to toys and eventually to video games. Key milestones include the launch of the Family Computer (Famicom/NES) in 1983 and the introduction of the hybrid Nintendo Switch in 2017. Nintendo's product lineup includes home consoles like the Wii and Nintendo 64, handheld systems such as the Game Boy and Nintendo DS, and a variety of popular software titles, including Super Mario Bros. and The Legend of Zelda. Nintendo emphasizes creating enjoyable experiences for players of all ages through its iconic characters and franchises.
Security at Nintendo
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Nintendo's Application Security philosophy centers on proactive risk management and cross-functional partnership.
- The team's mission is to perform 'risk assessments, vulnerability management, penetration testing and remediation recommendations for cloud-based technologies and applications.' Rather than a siloed approach, the team 'works closely with engineering teams to proactively identify and fix security flaws and vulnerabilities' and 'partners with the Cloud Platform team to define, implement, and continuously improve cloud security architecture and standards.'.
Security Team
- The AppSec function resides within Nintendo of America (NOA)'s IT Risk & Security department.
- Key public-facing leaders include Jason Wilcox (IT Security), John Phan (Sr. IT Risk Analyst), and Blaine Milburn (Security Engineer).
- As of March 2026, there are at least two active job postings for the team: 'Security Engineer (Cloud)' and 'Sr Engineer, IT Security (NTD)'.
- Common skill patterns required include operationalizing Splunk detections and migrating systems to the CrowdStrike Falcon platform.
Key Initiatives
Nintendo operates a global vulnerability disclosure program via HackerOne, providing an initial acknowledgement within 7 working days and status updates every four weeks. Secure SDLC practices include 'infrastructure and application architecture reviews' and 'security reviews of existing network infrastructure deployments to identify security gaps or vulnerabilities.' There is no public evidence of a formal Security Champions program or specific 'Shift Left' branding in their workflows.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.