Senior Application Security Engineer at PlayStation Global

At PlayStation, we are more than just the home of the best gaming experiences. As a global leader in entertainment, we create the hardware and software that define modern gaming, including the PlayStation 5, PlayStation VR, and the acclaimed titles from our internal studios. We are part of Sony Interactive Entertainment, and we are committed to fostering an inclusive culture where curiosity and innovation thrive. If you are ready to help secure the infrastructure that powers our global gaming ecosystem, we invite you to join our growing team.

What you'll be doing

• You will conduct manual security testing across our products and services to proactively identify vulnerabilities, while leading these tests from initial scoping through to final reporting.
• You will collaborate directly with our development teams to triage security findings, investigate reports from external sources, and provide clear guidance on effective remediation strategies.
• You will partner with engineers and leadership to validate security controls, ensuring our systems remain resilient and aligned with industry standards and compliance requirements.

What you'll bring

To succeed in this role, you should have a strong background in information security and a passion for both offensive and defensive tactics. We are looking for someone with the following qualifications:

• At least 5 years of experience in information security, including 3 years specifically in penetration testing and 2 years working within software development.
• A solid understanding of application security weaknesses across web, database, and multi-tier architectures.
• Proficiency in reviewing source code and recommending mitigations for languages such as Java, Go, Python, and C/C++.
• Experience using industry-standard testing tools like Burp Suite, OWASP ZAP, Wireshark, and various SAST, SCA, or DAST scanners.
• Familiarity with cloud infrastructure, specifically AWS and GCP, as well as experience with C2 frameworks and automated attack tools.
• Excellent communication skills, allowing you to translate complex technical risks for both technical and non-technical stakeholders.
• A degree in Computer Science or Information Security, or equivalent professional experience.

What you'll get

The base salary range for this position is $172,100 to $258,100 USD. Your final compensation will be determined by your specific skills, experience, and location. In addition to your salary, you will enjoy a comprehensive benefits package designed to support your well-being and professional growth:

• Medical, dental, and vision insurance coverage.
• A 401k retirement plan with matching contributions.
• Generous paid time off.
• Access to wellness programs.
• The flexibility of a hybrid work environment.