Senior Security AI Risk Analyst

PlayStation; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

PlayStation in New York seeks a Senior AI Security professional to operate at the intersection of AI, security risk, architecture, and enablement. You will conduct security reviews using SIE's methodology, adapting to AI-enabled systems and translating weaknesses into actionable recommendations.

You will partner with Responsible AI & Governance, information security, IT & engineering teams to deliver reviews from design to launch, identify risks, data lineage, and remediation plans, and help

Qualifications

• 6+ years of experience building, integrating, assessing, or securing technical systems with recent hands-on AI security work.
• Familiarity with AI risk frameworks, AI governance, and industry trends.
• Strong ability to translate findings into practical, prioritized recommendations.
• Excellent communication and collaboration across engineering, product, and security teams.

Responsibilities

• Lead hands-on security risk reviews of AI use cases and systems from design to launch readiness.
• Assess end-to-end designs for material security risks, data lineage, and operational concerns.
• Translate findings into practical, risk-based recommendations and coordinate remediation.
• Serve as a trusted security partner by providing early consultation and reusable guidance.
• Coordinate with Responsible AI & Governance and security teams to deliver consistent reviews.
• Use security tooling to identify risks, engage owners, and document findings in GRC systems.
• Improve AI security requirements, review practices, and reference patterns as risks evolve.
• Track portfolio trends and elevation of matters needing additional expertise or risk authority.

Skills

AI security

Security risk assessment

Cross-functional collaboration

Communication

Threat modeling

Cloud security

Adversarial testing

Tools

GRC systems

Security tooling

AI platforms

Cloud services

Job description

• In this role, you will operate at the intersection of modern AI technology, security risk, architecture, and enablement. You will conduct AI security reviews using SIE’s established security risk assessment methodology, policies, standards, and control expectations, adapting their application to AI-enabled and agentic systems and identifying where AI-specific guidance or controls are needed. You will coordinate risk-focused design and architecture input and translate AI-specific weaknesses into decision-ready recommendations and engineering actions
• You will serve as an approachable security partner, working cross-functionally with teams across SIE’s business units and functions to support a diverse range of AI use cases, systems, and technologies. You will work especially closely with Responsible AI & Governance and coordinate expertise across Information Security teams and IT & Engineering organizations
• This is a highly collaborative, fast-moving role for someone who enjoys working directly with teams, navigating ambiguity, and using AI tools themselves. You will be the primary hands-on practitioner in an emerging AI Security capability, partnering with the AI Security strategy lead and specialist teams across SIE
• Lead hands-on security risk reviews of AI use cases and systems from early design through launch readiness
• Assess end-to-end designs to identify material security risks, control gaps, data lineage and classification, and operational concerns
• Translate findings into practical, risk-based recommendations and partner with stakeholders to track resolution
• Serve as a trusted security partner by providing early consultation, education, and reusable guidance
• Coordinate with Responsible AI & Governance, relevant security and technical teams to deliver consistent, well-informed reviews
• Use security tooling and discovery insights to identify emerging risks, engage owners, and support appropriate remediation. Document reviews and findings within SIE GRC systems
• Improve AI security requirements, review practices, reference patterns, and supporting tools as technologies and risks evolve
• Track portfolio trends, communicate significant risks and recurring gaps, and elevate matters requiring additional expertise or risk authority

Strong communication, empathy, and sound judgment, with the creativity to challenge assumptions, navigate ambiguity, and build trust while operating independently in a fast-moving environmentSound understanding of security fundamentals - including identity, permissions, data protection, integrations, and monitoring – and ability to apply these to AI-enabled and agentic systems as well as mapping back to existing security policies and frameworksProven ability to build trust and influence across engineering, product, creative, business, and security teams6+ years of experience building, integrating, assessing, or securing technical systems, including significant recent hands-on work with generative AIFamiliarity and ability to stay current with emerging AI technologies, evolving security risks, AI risk frameworks, and industry trendsStrong working knowledge of modern AI application stacks and the ability to interrogate designs, trace data and system interactions, and identify meaningful security weaknessesA practical builder mindset, with experience using AI tools, APIs, cloud services, code, or automation to explore systems and improve workflowsExperience with AI red teaming, adversarial testing, threat modeling, or security evaluations of LLM and agentic systemsExperience with cloud-based AI platforms, third-party AI services, or enterprise security toolingExperience in gaming, interactive entertainment, creator technology, or similarly innovative product environmentsExperience reviewing complex technical designs and translating identified weaknesses into practical, prioritized recommendations that support timely deliveryRelevant certifications are desirable and may include GIAC AI Platform Security (GAIPS), CISSP, CRISC, IAPP AI Governance Professional (AIGP), CCSK, CCSP, or equivalent AI, cloud, or security credentials