We are looking for an inspirational and hardworking person to join the Security Engineering team at SIE! You'll be joining a team of innovative engineers who are unified in their mission to make PlayStation the best and most secure gaming platform. This support is fulfilled by minimizing impact to the platform while ensuring security needs are met. This role is highly technical and requires a shown grasp of security principles and how they are applied to production environments. As a member of the Cloud Security team you will assist in the planning, design, development, testing, and management of security tools and controls that provide protection and visibility of our cloud environments.

Role Description:

Provide cloud security capabilities that are proactive, preventive-focused models that address modern threats, including those driven by AI-enabled attack techniques. Expanding into next-generation security domains such as AI/ML security, container security, and advanced threat detection and response.

We are seeking a highly experienced Cloud Security Engineer (Staff) to define and drive security architecture, strategy, and engineering practices across multi-cloud and hybrid environments. This role will serve as a technical leader responsible for securing cloud-native and AI-driven systems at scale while influencing security outcomes across multiple teams and departments.

Key Responsibilities

• Define and drive cloud security strategy, architecture standards, and technical roadmaps across cloud and AI-enabled environments
• Lead the design and implementation of preventative security controls, leveraging automation and AI-driven capabilities to reduce risk and improve detection and response
• Architect and secure complex multi-cloud and hybrid environments across AWS, Azure, GCP, and on-premise infrastructure
• Define and implement security architecture for AI/ML workloads, including model pipelines, data protection, and AI-integrated applications
• Identify and establish controls to mitigate AI-specific risks such as prompt injection, data poisoning, model leakage, and adversarial inputs
• Influence security and engineering practices across multiple teams and departments, driving adoption of secure-by-design principles
• Own the security outcomes of key cloud and AI initiatives, ensuring successful delivery and measurable risk reduction
• Establish and evolve DevSecOps and Infrastructure-as-Code (IaC) security standards, integrating security controls into CI/CD pipelines at scale
• Drive adoption and optimization of CNAPP platforms and related tooling to improve risk visibility and remediation across cloud, container, and AI environments
• Define and implement security architecture for containerized platforms (Kubernetes/EKS/GKE/AKS), including cluster hardening, workload isolation, image supply chain security, and runtime protection controls
• Lead the evolution of detection and response capabilities, integrating cloud telemetry, Cloud EDR, and advanced security analytics
• Conduct and guide threat modeling and risk assessments (Attack Surface Management, Data Security Posture Management, etc.) for complex cloud-native and AI-enabled systems
• Architect and deliver automation frameworks and security services to improve scalability and operational efficiency
• Provide technical leadership and mentorship to engineers, influencing department-level goals and technical direction

Qualifications:

• Bachelor’s degree or equivalent in Computer Science, Information Security, or related field
• Proven experience defining and securing large-scale cloud and hybrid architectures (AWS, Azure, GCP, On-Premise)
• Deep expertise in cloud security architecture, including IAM, network segmentation, encryption, and secure design patterns
• Strong programming and automation experience, with the ability to design and scale security engineering solutions
• Extensive experience implementing DevSecOps practices and securing Infrastructure-as-Code (IaC) workflows
• Expertise working with container technologies (Kubernetes, Docker, EKS, GKE, AKS)

AI / ML Security Expertise

• Deep understanding of security risks in AI/ML systems, including prompt injection, data poisoning, model leakage, and adversarial inputs
• Experience defining and securing AI/ML architectures, including training pipelines, inference systems, and AI-integrated applications
• Strong knowledge of data security and privacy controls in AI systems
• Familiarity with frameworks such as OWASP Top 10 for LLMs and NIST AI Risk Management Framework
• Experience securing advanced AI patterns such as LLM integrations, APIs, MCPs, RAG pipelines, or model services (preferred)

Security Tooling & Operations

• Experience leading implementation and adoption of CNAPP platforms
• Deep understanding of cloud detection and response, IaC scanning, and runtime protection
• Strong background in security prevention, detection, and response strategy

Additional Experience

• Experience designing highly scalable, resilient, and secure architectures across application, network, and data layers
• Experience influencing technical direction across multiple teams or departments
• Relevant certifications (e.g., ISC2, GIAC, AWS, Azure, GCP) preferred
• Experience working across multi-OS and distributed environments

Do you want to help bring PlayStation technology to a worldwide audience? Are you passionate about securing infrastructure that constantly pushes the boundary of the gaming industry? Are you ready to work with innovative technology, forward-thinking engineers, and a passionate security team? If so, join us!

The role is a senior-level application security position combining strong technical expertise with leadership, initiative, and collaboration. You will provide strategic mentorship and hands-on support in designing, implementing, and testing secure solutions that strengthen PlayStation products and services.

As a technical leader within Product Security, you’ll guide practices and influence multiple teams to embed security throughout the software development lifecycle.

Key Responsibilities

• Lead security initiatives across the SDLC and improve development practices through scalable automation.

• Conduct and guide threat modeling and security requirements early in design phases.

• Partner with developers, architects, and product managers to align business goals with security needs.

• Lead security architecture and code reviews for distributed systems.

• Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams.

• Advance the Product Security strategy through multi-functional initiatives and cultural influence.

• Balance business and security risks through technically grounded, pragmatic recommendations.

• Translate lessons learned into reusable organizational assets that enhance overall security posture.

• Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability.

• Demonstrate proactive leadership, coordinating teams to deliver measurable security and business impact.

Qualifications

• 7+ years in information security and 3+ years in software development.

• Bachelor’s degree or equivalent in Computer Science, Information Security, or related field.

• Effective communication and leadership abilities; capable of influencing technical and non-technical collaborators including management.

• Dedicated and proactive, finding opportunities and leading initiatives independently.

• Deep understanding of enterprise and cloud-native architectures and their secure design.

• Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors.

• Proven expertise in guiding security development and code evaluations and providing actionable, risk-based recommendations.

• Skilled in multiple programming languages (e.g., Java, C/C++, JavaScript, Python) and mitigating vulnerabilities such as OWASP Top 10.

• Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines.

• Familiar with Agile, DevOps, and modern delivery practices.

• Hands-on experience with cloud technologies (AWS, Azure, GCP, Kubernetes, service mesh, CDN) including secure configuration and identity management.

Desired Experience

• Strong analytical and problem-solving skills with an attacker perspective — able to anticipate and simulate real-world attacks.

• Experience in penetration testing, automated testing, or testing frameworks (JUnit, pytest, REST Assured, Playwright).

• Security certifications preferred (GIAC, OSCP, CEH, CISSP, CCSP, or equivalent).