Senior Application Security Engineer
PlayStation Global2 days ago
Base Salary
$177k - $266k/yr
Responsibilities
- Lead security initiatives across the software development lifecycle and improve development practices through scalable automation.
- Conduct and guide threat modeling and define security requirements during early design phases.
- Lead security architecture and code reviews for distributed systems.
- Perform hands-on security testing, identify risks, and drive remediation with vulnerability and incident response teams.
- Integrate security practices into product development and advance Product Security strategy through cross-functional initiatives.
- Provide pragmatic, risk-based recommendations that balance business and security requirements.
- Create reusable organizational security assets and mentor engineers and practitioners on secure-by-default practices.
- Coordinate teams and initiatives to deliver measurable security and business impact.
Requirements
- 7+ years of experience in information security and 3+ years of experience in software development.
- Bachelor’s degree or equivalent in Computer Science, Information Security, or a related field.
- Deep understanding of enterprise and cloud-native architectures and their secure design.
- Expertise in TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect, common attack vectors, security development, and code evaluations.
- Proficiency in multiple programming languages such as Java, C/C++, JavaScript, and Python.
- Experience mitigating vulnerabilities such as those in the OWASP Top 10.
- Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines.
- Hands-on experience with AWS, Azure, GCP, Kubernetes, service mesh, CDN, secure configuration, and identity management.
- Effective communication, leadership, analytical, problem-solving, influencing, and independent initiative skills.
- Preferred experience with penetration testing, automated testing, or testing frameworks including JUnit, pytest, REST Assured, and Playwright.
- Security certifications such as GIAC, OSCP, CEH, CISSP, CCSP, or equivalent are preferred.
Benefits
- Medical, dental, vision, matching 401(k), paid time off, wellness program, and employee discounts for Sony products.
- The role may be eligible for a bonus package.
- The role can be remote under a flexible working arrangement, with pay ranges varying by geographic location.
- Sony conducts background checks at the offer stage for new employees, which may include criminal background checks for some roles.