Senior Security Research Engineer

🕒 August 7

🏄 California – Remote

🏄 California – Remote

💵 $175.5k - $263.3k / year

⏰ Full Time

🟠 Senior

📚 Research Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 25%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sony Interactive Entertainment

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1994

🎮 Gaming

🔧 Hardware

📡 Telecommunications

Gaming • Hardware • Telecommunications

Sony Interactive Entertainment is a prominent division of Sony Corporation responsible for the PlayStation brand and family of products and services. It designs, produces, and sells hardware and software for gaming consoles such as the PlayStation 5, PlayStation 4, and PlayStation VR2. Sony Interactive Entertainment also offers a range of digital services including PlayStation Plus, an online subscription service that provides access to a vast library of games and exclusive content. The company is heavily involved in the development and publishing of video games, offering popular titles like Horizon Forbidden West and Gran Turismo 7. Additionally, it supports indie game developers and hosts live competitive gaming events, contributing significantly to the gaming industry's ecosystem.

📋 Description

• Lead complex Global Vulnerability Management workstreams advancing Threat Exposure Management and Continuous Threat Exposure Management • Translate annual TEM goals into delivery plans, milestones, success measures, dependencies, and repeatable operating practices • Lead hands-on vulnerability research and technical analysis • Confirm security conditions, eliminate false positives, characterize exploitability and business impact, and provide remediation or mitigation guidance • Improve vulnerability discovery and assessment across network, cloud, endpoint, application, container, and other technology environments • Develop risk-based prioritization using vulnerability and threat intelligence, exploitation evidence, asset and business context, control effectiveness, and remediation considerations • Lead security validation activities and develop proofs of concept when appropriate • Partner with Information Security teams and technology owners to mobilize remediation and measure progress • Evolve GVM platforms, integrations, data, analytics, automation, and AI-enabled workflows • Communicate vulnerability trends, material risks, remediation progress, and program outcomes to technical, operational, and leadership audiences • Mentor engineers and partner teams; contribute to technical standards and procedures • Maintain current knowledge of vulnerabilities, exploitation techniques, threat activity, security technologies, and industry practices • Some travel may be required

🎯 Requirements

• 8+ years of relevant experience in information security, information technology, systems engineering, or a related field, including substantial experience in vulnerability management, security research, or exposure management • Bachelor’s degree or equivalent in computer science, information security, or a related discipline • Experience leading complex technical workstreams across multiple teams and achieving measurable outcomes without direct reporting authority • Hands-on experience with vulnerability research, technical analysis, security validation, risk-based prioritization, and remediation or mitigation guidance • Experience assessing vulnerabilities across operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure • Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and integrations • Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and attack frameworks such as MITRE ATT&CK • Experience using scripting, programming, APIs, or automation; relevant technologies include Python, SQL, Bash, PowerShell, or JavaScript • Experience analyzing and contextualizing security data • Familiarity with version control, testing, code review, CI/CD, reusable components, and controlled production releases • Ability to communicate complex security conditions and recommendations to technical, operational, and leadership audiences • Experience mentoring engineers or analysts and influencing technical practices across teams • Background checks required at the offer stage

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • Matching 401(k) • Paid time off • Wellness program • Employee discounts for Sony products • Potential eligibility for a bonus package • Flexible remote work arrangement • Background check processing at offer stage