Senior Security Research Engineer

The role

You will serve as a technical lead within the Global Vulnerability Management team. You will lead complex work to advance Threat Exposure Management and perform hands-on vulnerability research, analysis, and remediation support.

What you will do

• Lead complex Global Vulnerability Management workstreams to advance Threat Exposure Management capability.
• Translate annual TEM goals into delivery plans, milestones, and repeatable operating practices.
• Lead hands-on vulnerability research and technical analysis to confirm security conditions and provide remediation guidance.
• Improve discovery and assessment of vulnerabilities across network, cloud, endpoint, application, and container environments.
• Develop risk-based prioritization using threat intelligence and business context.
• Lead security validation activities and develop proofs of concept.
• Partner with Information Security teams and technology owners to mobilize remediation.
• Evolve GVM platforms, integrations, data, analytics, automation, and AI-enabled workflows.
• Communicate vulnerability trends and program outcomes to technical and leadership audiences.
• Mentor engineers and contribute to technical standards and procedures.

Required qualifications

• 8+ years of relevant experience in information security, information technology, systems engineering, or a related field, including substantial experience in vulnerability management, security researc
• Bachelor’s degree or equivalent in computer science, information security, or a related discipline.
• Experience leading complex technical workstreams across multiple teams.
• Hands-on experience with vulnerability research, technical analysis, security validation, risk-based prioritization, and remediation or mitigation guidance.
• Experience assessing vulnerabilities across operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure.
• Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and their supporting integrations.
• Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and attack frameworks such as MITRE ATT&CK.
• Experience using scripting, programming, APIs, or automation including Python, SQL, Bash, PowerShell, or JavaScript.
• Experience analyzing and contextualizing security data.
• Familiarity with software engineering practices such as version control, testing, code review, CI/CD, and controlled production releases.
• Ability to communicate complex security conditions, priorities, tradeoffs, and recommendations clearly.

Nice to have

• Experience helping evolve a traditional vulnerability-management function toward a TEM or CTEM operating model.
• Experience with continuous security validation, adversarial exposure validation, exploit research, or proof-of-concept development.
• Experience securing cloud, container, application, or build-pipeline environments and integrating security capabilities into engineering workflows.
• Experience with security-data and analytics platforms such as Snowflake, Domo, or comparable technologies.
• Experience applying automation, advanced analytics, or AI-enabled capabilities to vulnerability analysis, prioritization, validation, or remediation workflows.

Benefits

• Medical
• Dental
• Vision
• Matching 401(k)
• Paid time off
• Wellness program
• Employee discounts for Sony products
• Possible bonus package

Before you apply

• Sony Interactive Entertainment conducts background checks at the offer stage, which may include criminal background checks.

About the company

Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand and a subsidiary of Sony Group Corporation. It is a dynamic technology company and entertainment leader.