- 8+ years of relevant experience in information security, information technology, systems engineering, or a related field, including substantial experience in vulnerability management, security research, or exposure management.
- Bachelor’s degree or equivalent in computer science, information security, or a related discipline.
- Experience leading complex technical workstreams across multiple teams, translating objectives into delivery plans, and achieving measurable outcomes without relying on direct reporting authority.
- Hands-on experience with vulnerability research, technical analysis, security validation, risk-based prioritization, and remediation or mitigation guidance.
- Experience assessing vulnerabilities across several technology domains, such as operating systems, networks, cloud services, applications, endpoints, containers, databases, or hybrid infrastructure.
- Experience with vulnerability discovery, assessment, validation, or exposure-management platforms and their supporting integrations.
- Knowledge of adversarial tactics, exploitation techniques, threat intelligence, and attack frameworks such as MITRE ATT&CK, with the ability to apply that information to vulnerability prioritization.
- Experience using scripting, programming, APIs, or automation to improve security analysis and operational workflows. Relevant technologies may include Python, SQL, Bash, PowerShell, JavaScript, or comparable languages.
- Experience analyzing and contextualizing security data to connect technical findings with asset, service, business, threat, control, and remediation information.
- Familiarity with software engineering practices such as version control, testing, code review, CI/CD, reusable components, and controlled production releases.
- Ability to communicate complex security conditions, priorities, tradeoffs, and recommendations clearly to technical, operational, and leadership audiences.
- Experience mentoring engineers or analysts and influencing technical practices across teams.
Desired qualifications
- Experience helping evolve a traditional vulnerability-management function toward a TEM or CTEM operating model.
- Experience with continuous security validation, adversarial exposure validation, exploit research, or proof-of-concept development.
- Experience securing cloud, container, application, or build-pipeline environments and integrating security capabilities into engineering workflows.
- Experience with security-data and analytics platforms such as Snowflake, Domo, or comparable technologies.
- Experience applying automation, advanced analytics, or AI-enabled capabilities to vulnerability analysis, prioritization, validation, or remediation workflows.
At SIE, we consider several factors when setting each role’s base pay range, including the competitive benchmarking data for the market and geographic location.
Please note that the base pay range may vary in line with our hybrid working policy and individual base pay will be determined based on job-related factors which may include knowledge, skills, experience, and location.
In addition, this role is eligible for SIE’s top-tier benefits package that includes medical, dental, vision, matching 401(k), paid time off, wellness program and coveted employee discounts for Sony products. This role also may be eligible for a bonus package. Click here to learn more.
This is a flexible role that can be remote, with varying pay ranges based on geographic location. For example, if you are based out of Seattle, the estimated base pay range for this role is listed below.
$175,500—$263,300 USD
Please note, Sony Interactive Entertainment conducts background checks at the offer stage for all new employees (which may include criminal background checks for some roles) and will need to process personal information to support these checks.
Please refer to our Candidate Privacy Notice (where applicable) for more information about what personal information we collect, how we use it, who we share it with, and your data protection rights.