Note: The job is a remote job and is open to candidates in USA. Sony Interactive Entertainment is hiring a Senior Application Security Engineer to strengthen security across PlayStation products and services. The role provides technical leadership, mentorship, and hands-on support for secure solution design, implementation, and testing, while guiding teams to embed security throughout the software development lifecycle.
Responsibilities
- Lead security initiatives across the SDLC and improve development practices through scalable automation
- Conduct and guide threat modeling and security requirements early in design phases
- Partner with developers, architects, and product managers to align business goals with security needs
- Lead security architecture and code reviews for distributed systems
- Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams
- Advance the Product Security strategy through multi-functional initiatives and cultural influence
- Balance business and security risks through technically grounded, pragmatic recommendations
- Translate lessons learned into reusable organizational assets that enhance overall security posture
- Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability
- Demonstrate proactive leadership, coordinating teams to deliver measurable security and business impact
Skills
- 7+ years in information security and 3+ years in software development
- Bachelor's degree or equivalent in Computer Science, Information Security, or related field
- Effective communication and leadership abilities; capable of influencing technical and non-technical collaborators including management
- Dedicated and proactive, finding opportunities and leading initiatives independently
- Deep understanding of enterprise and cloud-native architectures and their secure design
- Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors
- Proven expertise in guiding security development and code evaluations and providing actionable, risk-based recommendations
- Skilled in multiple programming languages (e.g., Java, C/C++, JavaScript, Python) and mitigating vulnerabilities such as OWASP Top 10
- Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines
- Familiar with Agile, DevOps, and modern delivery practices
- Hands-on experience with cloud technologies (AWS, Azure, GCP, Kubernetes, service mesh, CDN) including secure configuration and identity management
- Strong analytical and problem-solving skills with an attacker perspective — able to anticipate and simulate real-world attacks
- Experience in penetration testing, automated testing, or testing frameworks (JUnit, pytest, REST Assured, Playwright)
- Security certifications preferred (GIAC, OSCP, CEH, CISSP, CCSP, or equivalent)
Benefits
- Medical, dental, and vision benefits
- Matching 401(k)
- Paid time off
- Wellness program
- Employee discounts for Sony products
- This role also may be eligible for a bonus package.
- Flexible role that can be remote
Company Overview
Company H1B Sponsorship