Principal Security Application Engineer

Recognized as a global leader in interactive and digital entertainment, Sony Interactive Entertainment (SIE) is responsible for the PlayStation® brand and family of products and services. PlayStation has delivered innovation to the market since the launch of the original PlayStation in Japan in 1994.

The Principal Security Application Engineer position is a hands-on engineering role for someone who likes working in small teams and with other sharp engineers in a success-oriented, fast-paced, and fun environment. This hands-on engineering role is for someone comfortable working automated static code evaluation for multiple languages including C++, Java and Python, has experience with kernel level packet manipulation, a background in developing security features both embedded clients as well as high capacity streaming protocols, enjoys interacting with technical and production team members both inside and outside of the company, and who thrives in a success-oriented, fast-paced, and fun environment.

* Play a hands-on senior technical role in engineering security features for embedded clients and streaming protocols * Play a hands-on senior technical role in static and dynamic code reviews * Responsible for driving secure code review automation and vulnerability management * Conduct application threat models to determine priorities for a fast paced growth organization * Play a hands-on senior technical role in developing and implementing detection capabilities for indicators of compromise * Conduct Red Teaming and penetration testing of Gaikai applications and systems * Interact with operational and development teams to educate on secure coding techniques and innovative attack mitigations * Act as technical leader for security incident management and related forensics analysis * Develop and implement automated mitigations for security related attacks

* BS in Computer Science or equivalent, or 15+ years’ work experience * 10+ years of relevant system and/or network security experience * Demonstrated technical leadership among peers through work in the open source community, blogging, speaking, or other thought leadership * Development experience in C++ and Java * Strong Math or Physics background * Experience securing/operating large hardened Linux infrastructures * Strong proficiency in application threat modeling and experience in engineering mitigations * Experience with automated attack tools and developing mitigation techniques * Strong leadership background in security incident response * Extensive experience developing in distributed systems, including UDP as well as TCP networking * Experience with various types of load balancing, host based firewalling techniques, application proxies * Understanding of PKIs, x509, TLS, Multi-Factor Authentication and general certificate management techniques * Experience with Penetration Testing and building a matrixed Red Team * Involvement with development team(s) that delivered commercial software or software-based services (development, QA testing, or security role) * Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security * Strong partnership and business acumen as it relates to relaying and understanding security risks * Experience with both net and system forensics analysis and forensics data handling procedures **Additional Attributes** * Team player who can get along with others both inside and outside the company * Linux experience * Video gaming knowledge, experience or hobby is a plus * Enjoys working in an accomplishment-oriented, fast-paced environment * Strong communication and documentation skills * Comfortable with Agile development approach * Energized by a dynamic environment that is responsive to the needs of our partners * Hacker mindset and always strives to think like an attacker