Field of studyComputer Science, Engineering, Information Security, Mathematics (or related)
Study levelBachelor's
Preferred qualifications
Field of studyComputer Science, Engineering, Information Security, Mathematics (or related)
Study levelMaster's or higher
Original posting
Why PlayStation?
PlayStation isn’t just the Best Place to Play — it’s also the Best Place to Work. Today, we’re recognized as a global leader in entertainment producing The PlayStation family of products and services including PlayStation®5, PlayStation®4, PlayStation®VR, PlayStation®Plus, acclaimed PlayStation software titles from PlayStation Studios, and more.
PlayStation also strives to create an inclusive environment that empowers employees and embraces diversity. We welcome and encourage everyone who has a passion and curiosity for innovation, technology, and play to explore our open positions and join our growing global team.
The PlayStation brand falls under Sony Interactive Entertainment, a wholly-owned subsidiary of Sony Group Corporation.
PlayStation is not just the Best Place to Play - it is also the Best Place to Work. Since 1994, Sony Interactive Entertainment (SIE), a wholly owned subsidiary of Sony Group Corporation, has delivered industry-leading interactive entertainment experiences through the PlayStation brand.
We are seeking a highly technical security professional in Japan to work across Global Vulnerability Management (GVM) and Global Security Architecture (GSA). This role will help advance SIE’s approach to Threat Exposure Management by connecting real-world exposure evidence with practical security architecture, durable remediation, and preventative design guidance.
The successful candidate will work across cloud-native infrastructure, future technology initiatives, cloud gaming, artificial intelligence (AI)-enabled systems, platform services, and enterprise environments. They will apply architecture and exposure-management concepts to improve how security exposures are identified, prioritized, validated, treated, and prevented over time.
This position requires close collaboration with security, infrastructure, cloud, engineering, information technology, and business teams across SIE and Sony Group companies, including Japan- and United States-based stakeholders. Success depends on technical judgment, clear communication, practical delivery, and the ability to operate effectively in a matrixed global environment.
**About the Role
**Security architecture and exposure management are complementary disciplines: architecture establishes secure patterns and preventative controls, while exposure management uses evidence from real security exposures to improve decisions, remediation, and future designs.
· GVM focus: apply exposure-management practices to identify, enrich, prioritize, validate, and reduce the security exposures that matter most while improving evidence, remediation guidance, and continuous learning.
· GSA focus: conduct secure architecture reviews, develop reference patterns, select appropriate controls, and partner with engineering and infrastructure teams to reduce systemic risk.
· Shared outcome: recurring findings drive durable architecture improvements, new designs are reviewed early, and treatment decisions balance risk, business importance, evidence strength, feasibility, and long-term supportability.
Key Responsibilities
· Contribute across joint GVM and GSA initiatives, helping advance an integrated exposure-management operating model while delivering secure architecture reviews and architecture-informed remediation.
· Review new and existing services, platforms, infrastructure designs, and technical proposals to identify security weaknesses, attack paths, and control gaps early and recommend practical improvements.
· Analyze security exposures and findings using exploitability, business and asset criticality, supporting evidence, existing controls, and remediation complexity to recommend appropriate priorities and treatment options.
· Contribute across the exposure-management lifecycle by supporting discovery, enrichment, triage, validation, decisions, mobilization, verification, and learning for security exposures and findings.
· Partner with architecture, infrastructure, cloud, and engineering teams to translate recurring exposures and root causes into scalable design patterns, reference architectures, hardening standards, and preventative controls.
· Design and advise on secure cloud-native, hybrid, containerized, software-as-a-service (SaaS), platform-as-a-service (PaaS), and on-premises environments, including Amazon Web Services (AWS), Google Cloud, third-party security products, and custom-developed controls.
· Provide architecture-informed remediation guidance for cloud, network, endpoint, server, container, identity, application, platform, and AI-enabled systems.
· Contribute to authorized security validation activities such as proof-of-concept testing, attack path analysis, adversarial testing support, and control effectiveness reviews.
· Develop reusable technical guidance and use security tooling, data, AI, and automation responsibly to improve visibility, prioritization, consistency, and team effectiveness.
· Communicate security issues, design tradeoffs, and recommendations clearly; lead scoped work through completion; and align delivery across GVM, GSA, Japan, and global stakeholders.
Organization and Team
This position is jointly supported by GVM and GSA. The successful candidate will collaborate across Japan- and United States-based teams, connecting exposure insights with architecture decisions and durable risk reduction.
Required Qualifications (MUST)
· Demonstrated experience in information security, security engineering, systems engineering, cloud security, infrastructure security, product security, security architecture, or a related field.
· Strong foundation in security architecture principles, including architecture review, secure design, reference patterns, control selection, and the application of security requirements in complex production environments.
· Working knowledge of vulnerability and exposure management concepts, including threat-informed prioritization, validation, remediation workflows, and the use of evidence to support risk decisions.
· Hands-on experience assessing, securing, designing, or operating cloud-based, containerized, network, platform, application, identity, or enterprise infrastructure environments.
· Experience with security assessment, exposure analysis, vulnerability scanning, validation, architecture review, or secure implementation standards.
· Knowledge of operating systems, networking, identity, authentication, encryption, key management, segmentation, firewalls, web application firewalls (WAFs), distributed denial-of-service (DDoS) mitigation, and common enterprise security controls.
· Strong written and verbal communication skills, with business-level proficiency in Japanese and English, including the ability to conduct technical discussions and architecture reviews in English, explain technical risk in business terms, and influence without direct authority.
· Bachelor’s degree in Computer Science, Information Security, Mathematics, Engineering, a related field, or equivalent practical experience.
Preferred Qualifications (WANT)
· Experience spanning both vulnerability or threat exposure work and security architecture, design review, or security engineering work.
· Experience with AWS, Google Cloud, hybrid cloud, Kubernetes, continuous integration and continuous delivery (CI/CD) security, infrastructure as code, SaaS, PaaS, multi-tenant systems, AI system security, or modern application architectures.
· Experience validating exploitability through testing, proof-of-concept development, attack path analysis, adversarial testing, or control effectiveness reviews.
· Experience building or improving security reporting, analytics, automation, data-driven prioritization, reference architectures, cloud governance, or related security capabilities.
· Experience working across global teams and time zones, particularly with Japan- and United States-based stakeholders, and familiarity with business culture in Japan.
· Master’s degree or Ph.D. in Computer Science, Information Security, Mathematics, Engineering, a related field, or equivalent advanced experience.
What We’re Looking For
· A practitioner who can connect exposure analysis, threat research, exploitability assessment, evidence-based prioritization, validation, remediation guidance, workflow coordination, and security tooling interpretation.
· A security architect who can translate those insights into reference patterns, design guidance, control selection, and secure cloud, application, network, identity, and infrastructure architecture.
· A collaborative systems thinker who can lead scoped work, document technical decisions clearly, and balance speed, risk reduction, business needs, and long-term design quality.
Equal Opportunity Statement:
Sony is an Equal Opportunity Employer. All persons will receive consideration for employment without regard to gender (including gender identity, gender expression and gender reassignment), race (including colour, nationality, ethnic or national origin), religion or belief, marital or civil partnership status, disability, age, sexual orientation, pregnancy or maternity, trade union membership or membership in any other legally protected category.
We strive to create an inclusive environment, empower employees and embrace diversity. We encourage everyone to respond.
PlayStation is a Fair Chance employer and qualified applicants with arrest and conviction records will be considered for employment.
Security Exposure & Architecture Engineer at Sony Interactive Entertainment — BranchFactor