Senior Security Research Engineer at PlayStation Global

United States

$175.5k - $263.3k

<div class="content-intro"><p><strong>Why Sony Interactive Entertainment?</strong></p> <p>Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.</p></div><p><span style="color: #000000;">Reporting to the Director of Global Vulnerability Management, you will serve as a Senior Security Research Engineer and technical lead within SIE’s Global Vulnerability Management team. You will lead complex work that advances our Threat Exposure Management capability and supports our transition to a Continuous Threat Exposure Management operating model, while remaining directly engaged in vulnerability research, analysis, security validation, prioritization, and remediation support.</span></p> <p style="color: !important;"><span style="color: #000000;">You will partner across Information Security, engineering, technology, and business teams to improve how SIE discovers, prioritizes, validates, and mobilizes action on security risks. You will translate annual TEM goals into defined workstreams, delivery plans, success measures, and repeatable operating practices that improve visibility, decision-making, remediation outcomes, and program scale.<br><br><strong>Responsibilities</strong></span></p> <ul> <li><span style="color: #000000;">Lead complex Global Vulnerability Management workstreams that advance SIE’s Threat Exposure Management capability and transition toward a Continuous Threat Exposure Management operating model across discovery, prioritization, validation, and mobilization.</span></li> <li><span style="color: #000000;">Translate annual TEM goals into defined delivery plans, milestones, success measures, dependencies, and repeatable operating practices. Monitor progress, identify barriers, and adjust execution to improve outcomes.</span></li> <li><span style="color: #000000;">Lead hands-on vulnerability research and technical analysis to confirm security conditions, eliminate false positives, characterize exploitability and business impact, and provide actionable remediation or mitigation guidance.</span></li> <li><span style="color: #000000;">Improve the discovery and assessment of vulnerabilities across SIE network, cloud, endpoint, application, container, and other technology environments.</span></li> <li><span style="color: #000000;">Develop risk-based prioritization using vulnerability and threat intelligence, exploitation evidence, asset and business context, control effectiveness, and remediation considerations.</span></li> <li><span style="color: #000000;">Lead security validation activities and develop proofs of concept when appropriate to distinguish material risk, evaluate defensive controls, and support informed decisions.</span></li> <li><span style="color: #000000;">Partner with Information Security teams and technology owners to mobilize remediation, clarify ownership, establish effective handoffs, resolve barriers, and measure progress through remediation, mitigation, or accepted disposition.</span></li> <li><span style="color: #000000;">Evolve GVM platforms, integrations, data, analytics, automation, and AI-enabled workflows to improve coverage, data quality, consistency, decision speed, and operational scale.</span></li> <li><span style="color: #000000;">Communicate vulnerability trends, material risks, remediation progress, and program outcomes to technical, operational, and leadership audiences through clear reports and recommendations.</span></li> <li><span style="color: #000000;">Mentor engineers and partner teams, contribute to technical standards and procedures, and improve the quality of vulnerability analysis, validation, documentation, and delivery.</span></li> <li><span style="color: #000000;">Maintain current knowledge of relevant vulnerabilities, exploitation techniques, threat activity, security technologies, and industry practices.</span></li> <li><span style="color: #000000;">Some travel may be required.</span></li> </ul> <h2 style="color: !important;"><span style="color: #000000;">Qualifications</span></h2> <ul> <li><span style="color: #000000;">8+ years of relevant experience in information security, information technology, systems engineering, or a related field, including substantial experience in vulnerability management, security research, or exposure management.</span></li> <li><span style="color: #000000;">Bachelor’s degree or equivalent in computer science, information security, or a related discipline.</span></li> <li><span style="color: #000000;">Experience leading complex technical workstreams across multiple teams, translating objectives into delivery plans, and achieving measurable outcomes without relying on direct reporting authority.</span></li> <li><span style="color: #000000;">Hands-on experience with vulnerability research, technical analysis, security validation, risk-based prioritization, and remediation or mitigation guidance.</span></li> <li><span style="color: #000000;">Experience assessing vulnerabilities across several technology domains, such as operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure.</span></li> <li><span style="color: #000000;">Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and their supporting integrations.</span></li> <li><span style="color: #000000;">Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and attack frameworks such as MITRE ATT&amp;CK, with the ability to apply that information to vulnerability prioritization.</span></li> <li><span style="color: #000000;">Experience using scripting, programming, APIs, or automation to improve security analysis and operational workflows. Relevant technologies may include Python, SQL, Bash, PowerShell, JavaScript, or comparable languages.</span></li> <li><span style="color: #000000;">Experience analyzing and contextualizing security data to connect technical findings with asset, service, business, threat, control, and remediation information.</span></li> <li><span style="color: #000000;">Familiarity with software engineering practices such as version control, testing, code review, CI/CD, reusable components, and controlled production releases.</span></li> <li><span style="color: #000000;">Ability to communicate complex security conditions, priorities, tradeoffs, and recommendations clearly to technical, operational, and leadership audiences.</span></li> <li><span style="color: #000000;">Experience mentoring engineers or analysts and influencing technical practices across teams.</span></li> </ul> <h2 style="color: !important;"><span style="color: #000000;">Desired qualifications</span></h2> <ul> <li><span style="color: #000000;">Experience helping evolve a traditional vulnerability-management function toward a TEM or CTEM operating model.</span></li> <li><span style="color: #000000;">Experience with continuous security validation, adversarial exposure validation, exploit research, or proof-of-concept development.</span></li> <li><span style="color: #000000;">Experience securing cloud, container, application, or build-pipeline environments and integrating security capabilities into engineering workflows.</span></li> <li><span style="color: #000000;">Experience with security-data and analytics platforms such as Snowflake, Domo, or comparable technologies.</span></li> <li><span style="color: #000000;">Experience applying automation, advanced analytics, or AI-enabled capabilities to vulnerability analysis, prioritization, validation, or remediation workflows.</span></li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p><span style="font-weight: 400;">At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location.&nbsp;<br><br></span><span style="font-weight: 400;">Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.&nbsp;<br><br></span><span style="font-weight: 400;">In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click </span><a href="https://careers.playstation.com/benefits" target="_blank"><span style="font-weight: 400;"><strong>here</strong></span></a><span style="font-weight: 400;"> to learn more.</span></p></div><div class="title">This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below.</div><div class="pay-range"><span>$175,500</span><span class="divider">&mdash;</span><span>$263,300 USD</span></div></div></div><div class="content-conclusion"><p class="p1">Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.</p> <p class="p1">Please refer to our&nbsp;<a href="https://www.playstation.com/legal/careers-privacy-notice/" target="_blank">Candidate Privacy Notice</a>&nbsp;for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights.</p> <p><strong>Equal Opportunity Statement:</strong></p> <p><em>Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy, maternity or parental status, trade union membership or membership in any other legally protected category.</em></p> <p><em>We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.&nbsp;</em></p> <p><em>Sony Interactive Entertainment is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.</em></p> <p>&nbsp;</p></div>