Application Security Engineer, PlayStation

• Do you want to help bring PlayStation technology to a worldwide audience? Are you passionate about securing infrastructure that constantly pushes the boundary of the gaming industry? Are you ready to work with innovative technology, forward-thinking engineers, and a passionate security team? If so, join us!
• 3+ years previous experience in Information Security
• 1+ years of penetration testing (or similar) experience OR 2+ years’ experience working within software development
• Bachelor’s degree in Computer Science or Information Security, or equivalent work experience
• Penetration testing or application security certifications are a plus, such as OSCP, GWAPT, CEH, among others
• Good understanding of application security weaknesses for various technologies including web applications, databases, and multi-tier applications
• Ability to review source code and explain mitigation controls within source code for various programming languages (Java, C, Go, JavaScript, etc.)
• Experience with application security scanning tools such as SAST, SCA and DAST
• Experience with web application testing tools like Burp Suite, OWASP ZAP, or Caido

Desirable

• Information Security functions as a strategic enabler for SIE’s player‑first mentality, commitment to integrity, and drive for innovation while maintaining trust in the PlayStation ecosystem
• Our organization, Product Security, embeds security into the entire product lifecycle—from architecture and design through development, testing, release, and maintenance
• We focus on enabling innovation safely: supporting new features, devices, and services without sacrificing performance, usability, or creativity
• This role sits in the Proactive Defense team, whose areas of responsibility encompass offensive security engagements and manual verification efforts, including but not limited to penetration testing, responsible disclosure and vulnerability management for application vulnerabilities inside the PlayStation platform
• Penetration Testing: Lead security tests from scoping to report, working with developers to address findings. Proactively discover vulnerabilities and track them to resolution with developers. Validate security controls to ensure alignment with compliance and industry standard methodologies
• Vulnerability Management: Track and analyze vulnerabilities in applications, providing guidance and support for remediation efforts. Determine and recommend remediation guidelines
• Responsible Disclosure: Investigate and triage vulnerabilities reported from external sources, including Responsible Disclosure program
• Collaboration with Development Teams: Collaborate with engineers, consultants and leadership to resolve security risks and provide mitigation recommendations