Senior Application Security Engineer
Core
Senior Application Security Engineer leading security initiatives across the SDLC, conducting threat modeling, and performing hands-on testing to secure PlayStation products and services.
Role type
Senior IC application security engineer (technical leader)
Builds
Secure software solutions and infrastructure for PlayStation products and services
Domain
Gaming / Cloud-native / Enterprise security
Required skills
Threat modeling, SDLC security integration, secure architecture design, code review, vulnerability assessment, incident response, secure cloud configuration, CI/CD pipeline security, network protocol expertise, programming (Java, C/C++, JavaScript, Python), OWASP Top 10 mitigation
Preferred skills
Penetration testing, automated testing frameworks (JUnit, pytest, REST Assured, Playwright), security certifications (GIAC, OSCP, CEH, CISSP, CCSP)
Technologies
AWS, Azure, GCP, Kubernetes, service mesh, CDN, SAST, DAST, dependency scanning, TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect
Responsibilities
Lead security initiatives across the SDLC and improve development practices through scalable automation; Conduct and guide threat modeling and security requirements early in design phases; Partner with developers, architects, and product managers to align business goals with security needs; Lead security architecture and code reviews for distributed systems; Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams; Advance the Product Security strategy through multi-functional initiatives and cultural influence; Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability
Seniority
Senior, hands-on IC with leadership
