Executive Director, Application Security Architect
Sony Pictures Entertainment8 months ago
Culver City, CA, USAStaff+
Base Salary
$205k - $258k/yr
Responsibilities
- Develop and execute security architecture strategy across application, data, and cloud environments.
- Define, document, and promote security architecture, DevSecOps, and technical standards.
- Lead hands-on security solution design and implementation reviews and assess security risks in existing and planned systems.
- Lead security architecture reviews, threat assessments, vulnerability analysis, and mitigation planning.
- Research, evaluate, recommend, and oversee proof-of-concept testing for security technologies and vendors.
- Embed application security principles throughout technology development and deployment lifecycles.
- Maintain security architecture documentation and governance processes aligned with applicable regulations and frameworks.
- Lead, motivate, and develop a team of security professionals while aligning security priorities with business and cybersecurity goals.
Requirements
- Bachelor’s degree in Computer Science, Information Security, or a related field.
- At least 10 years of progressive experience in cybersecurity or application security engineering.
- At least 5 years of experience in a security architecture leadership role with hands-on experience.
- Deep knowledge of security architecture, defense-in-depth, zero-trust, IAM, AI security, product security, threat modeling, privacy, vulnerability assessment, DevSecOps, and secure coding.
- Experience with full-stack web applications and APIs, WAFs, secure software development lifecycles, infrastructure as code, Docker and container security, data security, SAST/DAST, API security, authentication, and authorization.
- Proficiency in cloud security models and tools, encryption and key management, PAM, and AWS and Azure security.
- Knowledge of firewalls, IDS/IPS, network segmentation, VPNs, NAC, DMZ design, and DDoS mitigation.
- Knowledge of NIST Cybersecurity Framework, ISO 27001/27002, PCI DSS, OWASP, SAFECode, TPN, and MotionLabs guidelines.
- Advanced technical certifications such as CISSP, CCSP, CSSLP, OSCP, or vendor-specific architecture and security certifications are strongly preferred.
- Strong leadership, strategic thinking, communication, influence, analytical problem-solving, and adaptability skills.
Benefits
- The role may qualify for annual incentive compensation and comprehensive benefits.
About Sony Pictures Entertainment
Sony Pictures Entertainment produces and distributes motion pictures and television series, manages digital content and home entertainment, and operates studio facilities for creators and global platforms. A subsidiary of Sony Group Corporation based in Culver City, it distributes content in more than 130 countries and runs a studio lot with 18 sound stages. Revenue comes from theatrical and TV distribution, licensing, networks, and related services.