Lead AppSec Engineer: Secure Cloud & DevOps (Remote)

Sony Interactive Entertainment (SIE); United States; Remote; USD 140,000 - 210,000; Full time

Job summary

Sony Interactive Entertainment (SIE) is seeking a senior Application Security lead to drive security across the software development lifecycle for large-scale products and services. You will combine hands-on security engineering with technical leadership to design safer systems, address vulnerabilities, and make security a practical part of delivery.

You will guide security initiatives, lead threat modeling, review architectures, and mentor engineers while collaborating with developers,

Qualifications

• 7+ years in information security and 3+ years in software development.
• Bachelor’s degree or equivalent in computer science, information security, or related field.
• Strong understanding of enterprise and cloud-native architecture and secure design.
• Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack methods.
• Experience reviewing code and guiding secure development; knowledge of Java, C/C++, JavaScript, or Python and OWASP Top 10 mitigations.
• Experience integrating SAST, DAST, and dependency scanning into CI/CD; familiarity with Agile, DevOps, and cloud tech (AWS, Azure, GCP, Kubernetes).

Responsibilities

• Guide security initiatives and improve development practices through scalable automation.
• Lead threat modeling and define security requirements early in product design.
• Partner with developers, architects, and product managers to align security measures with product goals.
• Review application architectures and code, especially for distributed systems, and provide practical risk-based guidance.
• Test systems for vulnerabilities and coordinate remediation with security response teams.
• Mentor engineers and help turn lessons learned into reusable security practices.

Skills

Threat modeling

Secure software development

Security architecture

Automation

Cross-functional leadership

Education

Bachelor’s degree or equivalent in CS/InfoSec

Tools

SAST

DAST

Dependency scanning

CI/CD tooling

Job description

Sony Interactive Entertainment (SIE) is seeking a senior Application Security lead to drive security across the software development lifecycle for large-scale products and services. You will combine hands-on security engineering with technical leadership to design safer systems, address vulnerabilities, and make security a practical part of delivery.

You will guide security initiatives, lead threat modeling, review architectures, and mentor engineers while collaborating with developers,