Senior Application Security Engineer

Location: United States, Remote

Salary: $177,300–$265,900 USD base pay per year; pay may vary by geographic location.

Company

hirify.global develops PlayStation hardware, network services, and entertainment experiences for a worldwide audience.

What you will do

• Lead application security initiatives across the software development lifecycle and improve development practices through scalable automation.
• Conduct and guide threat modeling, define security requirements, and lead security architecture and code reviews for distributed systems.
• Partner with developers, architects, product managers, vulnerability teams, and incident response teams to align security with business goals and drive remediation.
• Perform hands-on security testing, identify risks, and provide pragmatic, risk-based recommendations.
• Advance Product Security strategy through cross-functional initiatives and reusable organizational assets.
• Mentor engineers and practitioners while coordinating teams to deliver measurable security and business impact.

Requirements

• 7+ years of information security experience and 3+ years of software development experience.
• Bachelor’s degree or equivalent in Computer Science, Information Security, or a related field.
• Effective communication and leadership skills, including the ability to influence technical and non-technical collaborators and management.
• Proactive ownership, initiative, and the ability to lead efforts independently.
• Deep understanding of enterprise and cloud-native architectures and their secure design.
• Expertise in TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect, and common attack vectors.
• Experience guiding security development and code evaluations and providing actionable, risk-based recommendations.
• Experience with multiple programming languages, including examples such as Java, C/C++, JavaScript, and Python, and with mitigating OWASP Top 10 vulnerabilities.
• Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines; familiarity with Agile, DevOps, and modern delivery practices.
• Hands-on experience with AWS, Azure, GCP, Kubernetes, service mesh, and CDN technologies, including secure configuration and identity management.

Nice to have

• Strong analytical and problem-solving skills with an attacker perspective, including the ability to anticipate and simulate real-world attacks.
• Experience in penetration testing, automated testing, or testing frameworks such as JUnit, pytest, REST Assured, and Playwright.
• Security certifications such as GIAC, OSCP, CEH, CISSP, CCSP, or equivalent.

Culture & Benefits

• Flexible remote work policy with pay ranges varying by geographic location.
• Medical, dental, and vision coverage.
• Matching 401(k), paid time off, and wellness program.
• Employee discounts on Sony products and potential eligibility for a bonus package.
• Inclusive equal-opportunity and fair-chance employment environment.

Hiring process

• Background checks are conducted at the offer stage and may include criminal background checks for some roles.