シニア セキュリティエクスポージャー＆アーキテクチャ エンジニア/Senior Security Exposure & Architecture Engineer
PlayStation7 hours ago
Tokyo, JapanSenior
Responsibilities
- Contribute to joint Global Vulnerability Management and Global Security Architecture initiatives and help develop an integrated exposure-management operating model.
- Review services, platforms, infrastructure designs, and technical proposals to identify weaknesses, attack paths, and security control gaps and recommend practical improvements.
- Analyze exposures using exploitability, threat information, asset and business criticality, evidence, existing controls, and remediation complexity to recommend priorities and treatment options.
- Support the full exposure-management lifecycle, including discovery, enrichment, triage, validation, decision-making, remediation coordination, verification, and learning.
- Translate recurring exposures and root causes into scalable design patterns, reference architectures, hardening standards, and preventative controls.
- Design and advise on secure cloud-native, hybrid, containerized, SaaS, PaaS, and on-premises environments, including AWS and Google Cloud.
- Provide architecture-informed remediation guidance for cloud, network, endpoint, server, container, identity, application, platform, and AI-enabled systems.
- Participate in authorized proof-of-concept testing, attack-path analysis, adversarial testing, and security-control effectiveness reviews.
- Develop reusable technical guidance and use security tooling, data, AI, and automation to improve visibility, prioritization, consistency, and team effectiveness.
- Communicate security issues, design trade-offs, and recommendations clearly while coordinating delivery across Japanese, U.S., and global stakeholders.
Requirements
- Experience in information security, security engineering, systems engineering, cloud security, infrastructure security, product security, security architecture, or a related field.
- Strong knowledge and experience in architecture reviews, secure design, reference patterns, security-control selection, and applying security requirements to complex production environments.
- Knowledge of vulnerability and security exposure management, including threat-informed prioritization, validation, remediation workflows, and evidence-based risk decisions.
- Hands-on experience assessing, securing, designing, or operating cloud, container, network, platform, application, identity, or enterprise infrastructure environments.
- Experience with security assessments, exposure analysis, vulnerability scanning, validation, architecture reviews, or secure implementation standards.
- Knowledge of operating systems, networking, identity, authentication, encryption, key management, segmentation, firewalls, WAFs, DDoS mitigation, and common enterprise security controls.
- Business-level Japanese and English communication skills, including conducting technical discussions and architecture reviews in English and influencing stakeholders without direct authority.
- Bachelor’s degree in Computer Science, Information Security, Mathematics, Engineering, or a related field, or equivalent practical experience.
- Preferred experience with AWS, Google Cloud, hybrid cloud, Kubernetes, CI/CD security, infrastructure as code, SaaS, PaaS, multi-tenant systems, AI system security, or modern application architectures.
- Preferred experience validating exploitability through testing, proof-of-concept development, attack-path analysis, adversarial testing, or control-effectiveness reviews.
- Preferred experience building or improving security reporting, analytics, automation, data-driven prioritization, reference architectures, cloud governance, or related security capabilities.
- Preferred experience working across global teams and time zones, particularly with Japan- and U.S.-based stakeholders; master’s degree or Ph.D. is also preferred.
Tech Stack
Categories
About PlayStation
PlayStation, operated by Sony Interactive Entertainment, develops and sells consumer gaming hardware (PS5, PS4, PlayStation VR), first‑party games via PlayStation Studios, and digital services like PlayStation Store and PlayStation Plus. Revenue comes from console and accessory sales, game publishing, digital distribution, and subscriptions for a global player base. The brand launched in 1994 and is headquartered in San Mateo, California, as a wholly owned subsidiary of Sony Group Corporation.