Senior Security Research Engineer

Job not on LinkedIn

🔥 0 minutes ago

🏄 California – Remote

🏄 California – Remote

💵 $175.5k - $263.3k / year

⏰ Full Time

🟠 Senior

📚 Research Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sony Interactive Entertainment

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1994

🎮 Gaming

🔧 Hardware

📡 Telecommunications

Gaming • Hardware • Telecommunications

Sony Interactive Entertainment is a prominent division of Sony Corporation responsible for the PlayStation brand and family of products and services. It designs, produces, and sells hardware and software for gaming consoles such as the PlayStation 5, PlayStation 4, and PlayStation VR2. Sony Interactive Entertainment also offers a range of digital services including PlayStation Plus, an online subscription service that provides access to a vast library of games and exclusive content. The company is heavily involved in the development and publishing of video games, offering popular titles like Horizon Forbidden West and Gran Turismo 7. Additionally, it supports indie game developers and hosts live competitive gaming events, contributing significantly to the gaming industry's ecosystem.

📋 Description

• Lead complex Global Vulnerability Management workstreams advancing Threat Exposure Management and the transition toward a Continuous Threat Exposure Management operating model. • Translate annual TEM goals into delivery plans, milestones, success measures, dependencies, and repeatable operating practices. • Lead hands-on vulnerability research and technical analysis to confirm security conditions, eliminate false positives, characterize exploitability and business impact, and provide remediation or mitigation guidance. • Improve vulnerability discovery and assessment across network, cloud, endpoint, application, container, database, and other technology environments. • Develop risk-based prioritization using vulnerability and threat intelligence, exploitation evidence, asset and business context, control effectiveness, and remediation considerations. • Lead security validation activities and develop proofs of concept when appropriate. • Partner with Information Security teams and technology owners to mobilize remediation and measure progress. • Evolve vulnerability-management platforms, integrations, data, analytics, automation, and AI-enabled workflows. • Communicate vulnerability trends, material risks, remediation progress, and program outcomes to technical, operational, and leadership audiences. • Mentor engineers and partner teams, contribute to technical standards and procedures, and improve vulnerability-analysis practices. • Maintain current knowledge of vulnerabilities, exploitation techniques, threat activity, security technologies, and industry practices. • Some travel may be required.

🎯 Requirements

• 8+ years of relevant experience in information security, information technology, systems engineering, or a related field, including substantial experience in vulnerability management, security research, or exposure management. • Bachelor’s degree or equivalent in computer science, information security, or a related discipline. • Experience leading complex technical workstreams across multiple teams and achieving measurable outcomes without direct reporting authority. • Hands-on experience with vulnerability research, technical analysis, security validation, risk-based prioritization, and remediation or mitigation guidance. • Experience assessing vulnerabilities across operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure. • Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and supporting integrations. • Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and attack frameworks such as MITRE ATT&CK. • Experience using scripting, programming, APIs, or automation; relevant technologies may include Python, SQL, Bash, PowerShell, or JavaScript. • Experience analyzing and contextualizing security data across asset, service, business, threat, control, and remediation information. • Familiarity with version control, testing, code review, CI/CD, reusable components, and controlled production releases. • Ability to communicate complex security conditions, priorities, tradeoffs, and recommendations clearly. • Experience mentoring engineers or analysts and influencing technical practices across teams. • Background check required at the offer stage for new employees. • Desired: experience with TEM/CTEM operating models, continuous security validation, exploit research, cloud/container/application/build-pipeline security, Snowflake or Domo, and automation, analytics, or AI-enabled security workflows.

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Matching 401(k) • Paid time off • Wellness program • Employee discounts for Sony products • May be eligible for a bonus package • Flexible/remote work arrangement • Background checks conducted at the offer stage