Application Security Engineer

Company: Sony PlayStation
Location: San Francisco
Posted on: March 19, 2023

Job Description:

Why PlayStation?PlayStation isn't just the Best Place to Play " it's also the Best Place to Work. Today, we're recognized as a global leader in entertainment producing The PlayStation family of products and services including PlayStation5, PlayStation4, PlayStationVR, PlayStationPlus, acclaimed PlayStation software titles from PlayStation Studios, and more.PlayStation also strives to create an inclusive environment that empowers employees and embraces diversity. We welcome and encourage everyone who has a passion and curiosity for innovation, technology, and play to explore our open positions and join our growing global team.The PlayStation brand falls under Sony Interactive Entertainment, a wholly-owned subsidiary of Sony Corporation.Application Security EngineerDo you want to help bring PlayStation technology to a worldwide audience? Are you passionate about securing infrastructure that constantly pushes the boundary of the gaming industry? Are you ready to work with innovative technology, forward-thinking engineers, and a passionate security team? If so, join us!The position is a hands-on application security engineering role for someone who likes working in multi-disciplined teams and with other sharp engineers in a fast-paced and fun environment.You will provide expert technical guidance and hands on validation of secure solutions during the design, development, and testing of systems supporting the PlayStation products and services.Key ResponsibilitiesCollaborate with engineers, consultants and leadership to address security risks and provide mitigation recommendations within the Secure Development Lifecycle (SDLC).Perform security architecture and design reviews of all systems and applications developed at PlayStation.Perform validation of security controls to insure consistency with compliance and industry standard methodologies.Working together with engineers to mitigate security vulnerabilities identified by our security tools as well as external reported vulnerabilities thought our bug bounty program.Perform hands on security testing of products and services to proactively discover risks and supervise them to resolution.Understand, balance and communicate business risk with security risk.Ability to understand business requirements and apply security without adversely affecting the desired functionality.High level of personal integrity, with the ability to professionally handle confidential matters, and reflect appropriate level of judgment as it pertains to security.Leading includes keeping better communication with other specialists and leadership in order to conduct other job duties in the above as a team.Qualifications3+ years previous experience in information security.2+ years' experience working within software development.A bachelor's degree in Computer Science/Information Security/Cyber Security or equivalent.Excellent written and oral communication skills, as well as social skills including the ability to articulate to both technical and non-technical audiences.Able to work both independently as well with development teams and multi-task effectively.Firm understanding of enterprise class application architectures that are highly scalable and reliable and the expertise to secure them.Experience of security architecture and design reviews.Experience with multiple languages such as Java, Go, Python and Perl etc. and understand how to detect and remedy related security issues such as OWASP top 10.Desired ExperienceExcellent analytical, evaluative, and problem-solving abilities.Experience with securing host, database, and application solutions for multi-tier systems.Experience with Penetration Testing.Knowledge of automated attack tools and developing mitigation techniques.Hacker Mindset and always strives to think like an attacker.Experience with AWS and Akamai technologies.Technical certifications within information security are a plus (CISSP, CCSP, GIAC or equivalents).#LI-JM5At SIE, we consider several factors when setting each role's base pay range, including the competitive benchmarking data for the market and geographic location.Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.In addition, this role is eligible for SIE's top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more.The estimated base pay range for this role is listed below.$125,800 " $188,600 USDEqual Opportunity Statement:Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy or maternity, trade union membership or membership in any other legally protected category.We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.PlayStation is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.

Keywords: Sony PlayStation, San Francisco , Application Security Engineer, Other , San Francisco, California