Senior Application Security Engineer (Gaming)

Location: United States, Remote

Base pay range: $177,300–$265,900 USD annually; pay may vary by geographic location and hybrid working policy.

Company

hirify.global is the gaming and entertainment brand of Sony Interactive Entertainment, delivering hardware, network services, and digital experiences to a worldwide audience.

What you will do

• Lead product security initiatives across the software development lifecycle and improve development practices through scalable automation.
• Conduct and guide threat modeling, define security requirements, and lead security architecture and code reviews for distributed systems.
• Partner with developers, architects, product managers, vulnerability teams, and incident response teams to align security with business goals and drive remediation.
• Perform hands-on security testing and provide pragmatic, risk-based recommendations.
• Advance Product Security strategy through cross-functional initiatives, reusable organizational assets, and cultural influence.
• Mentor engineers and coordinate teams to promote secure-by-default practices and measurable security impact.

Requirements

• 7+ years of information security experience and 3+ years of software development experience.
• Bachelor’s degree or equivalent in Computer Science, Information Security, or a related field.
• Effective communication and leadership skills, including the ability to influence technical and non-technical collaborators and management.
• Proactive ownership, initiative, analytical thinking, and the ability to lead initiatives independently.
• Deep understanding of enterprise and cloud-native architectures and secure design.
• Expertise in TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect, and common attack vectors.
• Experience guiding security development and code evaluations and delivering actionable, risk-based recommendations.
• Proficiency in multiple programming languages, such as Java, C/C++, JavaScript, and Python, and in mitigating OWASP Top 10 vulnerabilities.
• Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines, with familiarity with Agile, DevOps, and modern delivery practices.
• Hands-on experience with AWS, Azure, GCP, Kubernetes, service mesh, CDN, secure configuration, and identity management.

Nice to have

• Experience with penetration testing, automated testing, or testing frameworks such as JUnit, pytest, REST Assured, or Playwright.
• Security certifications such as GIAC, OSCP, CEH, CISSP, CCSP, or equivalent.
• Attacker-oriented analytical and problem-solving experience, including anticipating and simulating real-world attacks.

Culture & Benefits

• Remote work is available, with pay ranges varying by geographic location.
• Medical, dental, and vision coverage.
• Matching 401(k), paid time off, and wellness program.
• Employee discounts on Sony products and potential eligibility for a bonus package.
• Inclusive equal-opportunity and fair-chance employment environment.

Hiring process

• Background checks are conducted at the offer stage and may include criminal background checks for some roles.