Senior Application Security Engineer

Cybersecurity Jobs; San Diego (CA); On-site; USD 177,000 - 266,000; Full time

Job summary

PlayStation Global is seeking a senior application security engineer to shape secure software delivery end to end. This onsite role in San Diego, CA focuses on scalable security automation and practical guidance that teams can apply during everyday development.

You will lead security initiatives within Product Security, influence multiple teams to embed security throughout the build process, and translate findings into reusable assets to strengthen the company’s security posture.

Qualifications

• 7+ years in information security and 3+ years in software development.
• Bachelor’s degree or equivalent in Computer Science, Information Security, or a related field.
• Strong leadership and communication to influence both technical and non-technical collaborators.
• Deep understanding of enterprise and cloud-native architectures and secure design principles.
• Experience with AWS, Azure, GCP and Kubernetes in secure setups.
• Proficiency in Java, C/C++, JavaScript, Python and OWASP Top 10.

Responsibilities

• Lead security initiatives across the SDLC with scalable automation.
• Conduct and guide threat modeling and security requirements early in design phases.
• Partner with developers, architects, and product managers to align business goals with security needs.
• Lead security architecture work and code reviews for distributed systems.
• Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams.
• Mentor engineers to promote secure-by-default thinking and shared accountability.
• Coordinate teams to deliver measurable security and business impact.

Skills

Threat modeling

Security architecture

CI/CD security

Cloud security

Penetration testing

Programming languages

Secure coding

Education

Bachelor's degree or equivalent

Tools

SAST

DAST

OWASP Top 10

JUnit

pytest

REST Assured

Playwright

Job description

PlayStation Global is seeking a senior application security engineer to help shape secure software delivery end to end. This onsite role in San Diego, CA focuses on designing, implementing, testing, and mentoring solutions across the SDLC, with an emphasis on scalable security automation and practical guidance that teams can apply during everyday development.

In this position, you will lead security initiatives within Product Security, influence multiple teams to embed security throughout the build process, and translate security findings into reusable organizational assets that strengthen the company’s overall security posture.

What you’ll do

• Lead security initiatives across the SDLC while improving development practices through scalable automation.
• Conduct and guide threat modeling and security requirements early in the design phases.
• Partner with developers, architects, and product managers to align business goals with security needs.
• Lead security architecture work and code reviews for distributed systems.
• Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams.
• Advance the Product Security strategy through cross-functional initiatives and cultural influence.
• Provide technically grounded, pragmatic recommendations that balance business and security risks.
• Capture lessons learned and convert them into reusable organizational assets that improve the security posture.
• Mentor engineers and practitioners to promote secure-by-default thinking and shared accountability.
• Demonstrate proactive leadership by coordinating teams to deliver measurable security and business impact.

Requirements

• 7+ years in information security and 3+ years in software development.
• Bachelor’s degree or equivalent in Computer Science, Information Security, or a related field.
• Effective communication and leadership skills, including the ability to influence both technical and non-technical collaborators, including management.
• Dedicated and proactive approach, finding opportunities and leading initiatives independently.
• Deep understanding of enterprise and cloud-native architectures and secure design principles.
• Expertise in network and web protocols including TCP/IP, TLS, HTTPS, OAuth 2.0, and OpenID Connect, plus common attack vectors.
• Proven ability to guide security development and code evaluations with actionable, risk-based recommendations.
• Experience across multiple programming languages (Java, C/C++, JavaScript, Python) and vulnerability mitigation such as OWASP Top 10.
• Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines.
• Familiarity with Agile and DevOps, including modern delivery practices.
• Hands-on experience with cloud technologies including AWS, Azure, GCP, Kubernetes, service mesh, and CDN, including secure configuration and identity management.
• Strong analytical and problem-solving skills using an attacker perspective to anticipate and simulate real-world attacks.
• Experience with penetration testing, automated testing, or testing frameworks such as JUnit, pytest, REST Assured, and Playwright.
• Security certifications preferred: GIAC, OSCP, CEH, CISSP, CCSP, or equivalent.

Technologies

• Java, C/C++, JavaScript, Python
• TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect
• OWASP Top 10
• SAST, DAST, dependency scanning, CI/CD
• Agile, DevOps
• AWS, Azure, GCP
• Kubernetes, service mesh, CDN
• Identity management
• JUnit, pytest, REST Assured, Playwright
• Penetration testing

Location: San Diego, CA (onsite)
Compensation: USD 177,300 - 265,900 per year
Experience level: Senior (7 years minimum)