Senior Application Security Engineer

The role

This senior-level position combines technical expertise with leadership to design, implement, and test secure solutions for PlayStation products and services. You will guide security practices and influence multiple teams to embed security throughout the software development lifecycle.

What you will do

• Lead security initiatives across the SDLC and improve development practices through scalable automation.
• Conduct and guide threat modeling and security requirements early in design phases.
• Partner with developers, architects, and product managers to align business goals with security needs.
• Lead security architecture and code reviews for distributed systems.
• Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams.
• Advance the Product Security strategy through multi-functional initiatives and cultural influence.
• Balance business and security risks through technically grounded, pragmatic recommendations.
• Translate lessons learned into reusable organizational assets that enhance overall security posture.
• Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability.
• Demonstrate proactive leadership, coordinating teams to deliver measurable security and business impact.

Required qualifications

• 7+ years in information security
• 3+ years in software development
• Bachelor’s degree or equivalent in Computer Science, Information Security, or related field
• Effective communication and leadership abilities
• Deep understanding of enterprise and cloud-native architectures and their secure design
• Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors
• Proven expertise in guiding security development and code evaluations and providing actionable, risk-based recommendations
• Skilled in multiple programming languages (e.g., Java, C/C++, JavaScript, Python)
• Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines
• Familiar with Agile, DevOps, and modern delivery practices
• Hands-on experience with cloud technologies (AWS, Azure, GCP, Kubernetes, service mesh, CDN) including secure configuration and identity management

Nice to have

• Strong analytical and problem-solving skills with an attacker perspective
• Experience in penetration testing, automated testing, or testing frameworks (JUnit, pytest, REST Assured, Playwright)
• Security certifications preferred (GIAC, OSCP, CEH, CISSP, CCSP, or equivalent)

Benefits

• medical
• dental
• vision
• matching 401(k)
• paid time off
• wellness program
• employee discounts for Sony products

Before you apply

• Sony Interactive Entertainment conducts background checks at the offer stage for all new employees

About the company

Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand and a subsidiary of Sony Group Corporation. It is a dynamic technology company and entertainment leader.