Senior Application Security Engineer

PlayStation Global

9d•$177,300 - $265,900•Remote

About The Position

Sony Interactive Entertainment is seeking a senior-level application security professional to combine technical expertise with leadership, initiative, and collaboration. The role provides strategic mentorship and hands-on support in designing, implementing, and testing secure solutions that strengthen PlayStation products and services. As a technical leader within Product Security, the engineer will guide practices and influence multiple teams to embed security throughout the software development lifecycle. The position is flexible and may be performed remotely, with pay varying by geographic location.

Requirements

At least 7 years of experience in information security and 3 years in software development.
Bachelor’s degree or equivalent in Computer Science, Information Security, or a related field.
Effective communication and leadership abilities, including the ability to influence technical and non-technical collaborators and management.
Proactive approach to identifying opportunities and leading initiatives independently.
Deep understanding of enterprise and cloud-native architectures and their secure design.
Expertise in network and web protocols, including TCP/IP, TLS, HTTPS, OAuth 2.0, and OpenID Connect, and common attack vectors.
Proven expertise guiding security development and code evaluations and providing actionable, risk-based recommendations.
Skill in multiple programming languages, such as Java, C/C++, JavaScript, and Python, and in mitigating vulnerabilities such as OWASP Top 10 risks.
Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines.
Familiarity with Agile, DevOps, and modern delivery practices.
Hands-on experience with cloud technologies such as AWS, Azure, GCP, Kubernetes, service mesh, and CDN, including secure configuration and identity management.

Nice To Haves

Strong analytical and problem-solving skills, with an attacker perspective and the ability to anticipate and simulate real-world attacks.
Experience in penetration testing, automated testing, or testing frameworks such as JUnit, pytest, REST Assured, or Playwright.
Security certifications such as GIAC, OSCP, CEH, CISSP, CCSP, or equivalent.

Responsibilities

Lead security initiatives across the software development lifecycle and improve development practices through scalable automation.
Conduct and guide threat modeling and define security requirements early in design phases.
Partner with developers, architects, and product managers to align business goals with security needs.
Lead security architecture and code reviews for distributed systems.
Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams.
Advance Product Security strategy through cross-functional initiatives and cultural influence.
Balance business and security risks through technically grounded, pragmatic recommendations.
Translate lessons learned into reusable organizational assets that enhance the overall security posture.
Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability.
Coordinate teams proactively to deliver measurable security and business impact.