Senior Application Security Engineer

Sony Interactive Entertainment (SIE); USA; Remote; USD 140.000 - 210.000; Vollzeit

Zusammenfassung

Sony Interactive Entertainment (SIE) is seeking a senior Application Security lead to drive security across the software development lifecycle for large-scale products and services. You will combine hands-on security engineering with technical leadership to design safer systems, address vulnerabilities, and make security a practical part of delivery.

You will guide security initiatives, lead threat modeling, review architectures, and mentor engineers while collaborating with developers,

Qualifikationen

• 7+ years in information security and 3+ years in software development.
• Bachelor’s degree or equivalent in computer science, information security, or related field.
• Strong understanding of enterprise and cloud-native architecture and secure design.
• Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack methods.
• Experience reviewing code and guiding secure development; knowledge of Java, C/C++, JavaScript, or Python and OWASP Top 10 mitigations.
• Experience integrating SAST, DAST, and dependency scanning into CI/CD; familiarity with Agile, DevOps, and cloud tech (AWS, Azure, GCP, Kubernetes).

Aufgaben

• Guide security initiatives and improve development practices through scalable automation.
• Lead threat modeling and define security requirements early in product design.
• Partner with developers, architects, and product managers to align security measures with product goals.
• Review application architectures and code, especially for distributed systems, and provide practical risk-based guidance.
• Test systems for vulnerabilities and coordinate remediation with security response teams.
• Mentor engineers and help turn lessons learned into reusable security practices.

Kenntnisse

Threat modeling

Secure software development

Security architecture

Automation

Cross-functional leadership

Ausbildung

Bachelor’s degree or equivalent in CS/InfoSec

Tools

SAST

DAST

Dependency scanning

CI/CD tooling

Jobbeschreibung

Role overview

Lead application security work across the software development lifecycle for large-scale products and services. You’ll combine hands-on security engineering with technical leadership, helping teams design safer systems, address vulnerabilities, and make security a practical part of delivery.

Responsibilities

• Guide security initiatives and improve development practices through scalable automation.
• Lead threat modeling and define security requirements early in product design.
• Partner with developers, architects, and product managers to align security measures with product goals.
• Review application architectures and code, especially for distributed systems, and provide practical risk-based guidance.
• Test systems for vulnerabilities and coordinate remediation with security response teams.
• Mentor engineers and help turn lessons learned into reusable security practices.

Requirements

• At least 7 years in information security and 3 years in software development.
• Bachelor’s degree or equivalent in computer science, information security, or a related field.
• Strong understanding of enterprise and cloud-native architecture and secure design.
• Expertise in network and web protocols, including TCP/IP, TLS, HTTPS, OAuth 2.0, and OpenID Connect, and common attack methods.
• Experience reviewing code and guiding secure development, with knowledge of several languages such as Java, C/C++, JavaScript, or Python and mitigations for OWASP Top 10 risks.
• Experience integrating SAST, DAST, and dependency scanning into CI/CD, and working with Agile, DevOps, and cloud technologies such as AWS, Azure, GCP, Kubernetes, service mesh, or CDN.

Nice to have

Attacker-minded analysis, penetration testing, and automated testing experience are desirable. The source also emphasizes strong communication, independent initiative, and the ability to influence technical and non-technical partners.

Benefits and work setup

The position can be remote, with compensation varying by location.