Senior Security AI Risk Analyst

PlayStation Global•San Diego, CA

3d•$167,500 - $251,300•Hybrid

About The Position

Sony Interactive Entertainment (SIE) is seeking a Senior AI Security Risk Analyst to provide hands-on security support for AI systems, agents, workflows, tools, and integrations across SIE. In this role, you will operate at the intersection of modern AI technology, security risk, architecture, and enablement. You will conduct AI security reviews using SIE’s established security risk assessment methodology, policies, standards, and control expectations, adapting their application to AI-enabled and agentic systems and identifying where AI-specific guidance or controls are needed. You will coordinate risk-focused design and architecture input and translate AI-specific weaknesses into decision-ready recommendations and engineering actions. You will serve as an approachable security partner, working cross-functionally with teams across SIE’s business units and functions to support a diverse range of AI use cases, systems, and technologies. You will work especially closely with Responsible AI & Governance and coordinate expertise across Information Security teams and IT & Engineering organizations. This is a highly collaborative, fast-moving role for someone who enjoys working directly with teams, navigating ambiguity, and using AI tools themselves. You will be the primary hands-on practitioner in an emerging AI Security capability, partnering with the AI Security strategy lead and specialist teams across SIE.

Requirements

6+ years of experience building, integrating, assessing, or securing technical systems, including significant recent hands-on work with generative AI.
Strong working knowledge of modern AI application stacks and the ability to interrogate designs, trace data and system interactions, and identify meaningful security weaknesses.
Sound understanding of security fundamentals - including identity, permissions, data protection, integrations, and monitoring – and ability to apply these to AI-enabled and agentic systems as well as mapping back to existing security policies and frameworks.
A practical builder mindset, with experience using AI tools, APIs, cloud services, code, or automation to explore systems and improve workflows.
Proven ability to build trust and influence across engineering, product, creative, business, and security teams.
Familiarity and ability to stay current with emerging AI technologies, evolving security risks, AI risk frameworks, and industry trends.
Strong communication, empathy, and sound judgment, with the creativity to challenge assumptions, navigate ambiguity, and build trust while operating independently in a fast-moving environment.

Nice To Haves

Experience with AI red teaming, adversarial testing, threat modeling, or security evaluations of LLM and agentic systems.
Experience with cloud-based AI platforms, third-party AI services, or enterprise security tooling.
Experience in gaming, interactive entertainment, creator technology, or similarly innovative product environments.
Experience reviewing complex technical designs and translating identified weaknesses into practical, prioritized recommendations that support timely delivery.
Relevant certifications are desirable and may include GIAC AI Platform Security (GAIPS), CISSP, CRISC, IAPP AI Governance Professional (AIGP), CCSK, CCSP, or equivalent AI, cloud, or security credentials.

Responsibilities

Lead hands-on security risk reviews of AI use cases and systems from early design through launch readiness.
Assess end-to-end designs to identify material security risks, control gaps, data lineage and classification, and operational concerns.
Translate findings into practical, risk-based recommendations and partner with stakeholders to track resolution.
Serve as a trusted security partner by providing early consultation, education, and reusable guidance.
Coordinate with Responsible AI & Governance, relevant security and technical teams to deliver consistent, well-informed reviews.
Use security tooling and discovery insights to identify emerging risks, engage owners, and support appropriate remediation.
Document reviews and findings within SIE GRC systems.
Improve AI security requirements, review practices, reference patterns, and supporting tools as technologies and risks evolve.
Track portfolio trends, communicate significant risks and recurring gaps, and escalate matters requiring additional expertise or risk authority.