Senior Security Research Engineer

2 months, 1 week ago
Full-time
Lead
Software Development
PlayStation

PlayStation

PlayStation leads interactive entertainment with innovative consoles, games, and media, delighting fans globally since 1994.

Household Durables
100K+
Founded 1995
$8M raised

Description

  • Lead Global Vulnerability Management workstreams that advance Threat Exposure Management and the transition to a Continuous Threat Exposure Management operating model.
  • Translate annual TEM goals into delivery plans, milestones, success measures, dependencies, and repeatable operating practices.
  • Perform hands-on vulnerability research and technical analysis to confirm security conditions, assess exploitability and business impact, and provide remediation guidance.
  • Improve vulnerability discovery and assessment across network, cloud, endpoint, application, container, and other environments.
  • Develop risk-based prioritization using vulnerability intelligence, threat intelligence, asset context, control effectiveness, and remediation considerations.
  • Lead security validation activities and develop proofs of concept when needed to evaluate defensive controls and material risk.
  • Partner with security and technology teams to drive remediation, clarify ownership, establish handoffs, and track progress.
  • Evolve vulnerability management platforms, integrations, data, analytics, automation, and AI-enabled workflows to improve scale and decision-making.
  • Communicate trends, material risks, remediation progress, and program outcomes to technical and leadership audiences.
  • Mentor engineers and partner teams, contribute to technical standards, and improve analysis, validation, documentation, and delivery.

Requirements

  • 8+ years of relevant experience in information security, IT, systems engineering, or a related field.
  • Substantial experience in vulnerability management, security research, or exposure management.
  • Bachelor’s degree or equivalent in computer science, information security, or a related discipline.
  • Experience leading complex technical workstreams across multiple teams without direct reporting authority.
  • Hands-on experience with vulnerability research, technical analysis, security validation, prioritization, and remediation guidance.
  • Experience assessing vulnerabilities across operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure.
  • Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and integrations.
  • Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and frameworks such as MITRE ATT&CK.
  • Experience using scripting, programming, APIs, or automation such as Python, SQL, Bash, PowerShell, or JavaScript.
  • Experience analyzing security data and connecting technical findings to asset, service, business, threat, control, and remediation context.
  • Familiarity with software engineering practices such as version control, testing, code review, CI/CD, reusable components, and controlled releases.
  • Ability to communicate complex security priorities and recommendations clearly to technical, operational, and leadership audiences.
  • Experience mentoring engineers or analysts and influencing technical practices across teams.
  • Preferred: experience evolving vulnerability management toward a TEM or CTEM operating model.
  • Preferred: experience with continuous security validation, adversarial exposure validation, exploit research, or proof-of-concept development.
  • Preferred: experience securing cloud, container, application, or build-pipeline environments.
  • Preferred: experience with security-data and analytics platforms such as Snowflake or Domo.
  • Preferred: experience applying automation, advanced analytics, or AI-enabled capabilities to security workflows.
  • Some travel may be required.

Benefits

  • Base pay range of $175,500 to $263,300 USD for Seattle, with variation by geography and hybrid policy.
  • Flexible role that can be remote.
  • Medical, dental, and vision coverage.
  • Matching 401(k).
  • Paid time off.
  • Wellness program.
  • Employee discounts on Sony products.
  • Eligible for a bonus package.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Threat Intelligence Engineer

Coalition 251-1K Insurance

Coalition is hiring a Threat Intelligence professional to identify emerging vulnerabilities, lead zero-day response, and develop detections and threat intelligence that help protect policyholders from digital risk.

Penetration Testing Python SQL
3 hours, 58 minutes ago

Senior Threat Intelligence Engineer

Coalition 251-1K Insurance

Coalition is hiring a Threat Intelligence professional to identify emerging vulnerabilities, develop threat detections, and help prevent cyber losses for policyholders through its Active Insurance platform.

Cybersecurity Penetration Testing Python SQL
3 hours, 58 minutes ago

Staff Security Engineer, Security Enablement

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Staff Security Engineer to architect and deliver global, multi-domain security services spanning physical security, cloud infrastructure, identity, networking, and operational systems.

AWS DevSecOps GCP JIRA Network Security Python REST API SQL
1 day, 3 hours ago

Network Security Automation Engineer

GoDaddy 5001-10000 Technology, Information and Internet

GoDaddy is hiring a remote Network Security Automation Engineer in India to build and operate software, APIs, and automated workflows that manage network security policies at scale.

AWS CI/CD Git Kubernetes Network Security Python REST API Serverless SIEM Terraform TLS
1 day, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers