Role Overview
The Senior Security Exposure & Architecture Engineer role at Sony Interactive Entertainment in Tokyo bridges vulnerability management and security architecture to reduce overall security risks. This position suits an experienced technical professional who wants to connect real-world threat findings with secure, scalable system designs across global platforms.
Key Responsibilities
Participate in joint Global Vulnerability Management and Global Security Architecture initiatives to build integrated operating models.
Review new and existing services, platforms, and infrastructure designs to identify security weaknesses and control gaps early.
Analyze security exposures using exploitability, asset criticality, supporting evidence, and remediation complexity to recommend priorities.
Support the complete exposure management lifecycle, spanning discovery, enrichment, triage, validation, decision-making, and verification.
Partner with engineering, infrastructure, and cloud teams to translate recurring exposures into scalable design patterns and hardening standards.
Design and advise on secure cloud-native, hybrid cloud, containerized, SaaS, PaaS, and on-premises environments.
Provide architecture-informed remediation guidance across cloud, network, endpoint, server, container, identity, application, platform, and AI-enabled systems.
Support authorized security validation activities such as proof-of-concept testing, attack path analysis, and control effectiveness reviews.
Develop reusable technical guidance and utilize security tooling, data, AI, and automation responsibly to improve team effectiveness.
Communicate security issues and design tradeoffs clearly, leading scoped work to completion across international stakeholders.
Requirements
Professional background in information security, security engineering, systems engineering, cloud security, infrastructure security, product security, or security architecture.
Strong foundation in security architecture principles including architecture reviews, secure design, reference patterns, and control selection.
Working knowledge of vulnerability and exposure management concepts, such as threat-informed prioritization, risk validation, and remediation workflows.
Practical experience assessing, securing, designing, or operating cloud, container, network, platform, application, identity, or enterprise infrastructure environments.
Familiarity with security assessment, exposure analysis, vulnerability scanning, validation, and secure implementation standards.
Solid understanding of operating systems, networking, identity, authentication, encryption, key management, network segmentation, firewalls, WAF, and DDoS mitigation.
Business-level communication proficiency in both Japanese and English, including the ability to conduct technical discussions and architecture reviews in English.
Ability to explain technical risk in business terms and influence stakeholders without direct authority.
Bachelor’s degree in Computer Science, Information Security, Mathematics, Engineering, a related field, or equivalent practical experience.
Nice to Have
Experience spanning both vulnerability or threat exposure work and security architecture, design review, or security engineering.
Hands-on experience with AWS, Google Cloud, hybrid cloud, Kubernetes, CI/CD security, Infrastructure as Code, SaaS, PaaS, multi-tenant systems, AI system security, or modern application architectures.
Experience validating exploitability through testing, proof-of-concept development, attack path analysis, adversarial testing, or control effectiveness reviews.
Background in building or improving security reporting, analysis, automation, data-driven prioritization, or cloud governance.
Past work experience in global teams spanning multiple countries and time zones, with specific collaboration with US and Japanese stakeholders.
Understanding of the Japanese business culture and working environment.
Master’s or Doctorate degree in Computer Science, Information Security, Mathematics, Engineering, or a related field.
Skills and Tools
AWS
Google Cloud
Kubernetes
CI/CD Security
Infrastructure as Code
SaaS and PaaS environments
Operating systems and networking controls
Identity and access management
Encryption and key management
Firewalls, WAF, and DDoS mitigation
About the Company
Sony Interactive Entertainment delivers industry-leading interactive entertainment experiences through the iconic PlayStation brand. Operating globally as a wholly owned subsidiary of Sony Group Corporation, the organization produces hardware, software, and network services that empower employees and embrace diversity.
How to Apply
Interested candidates should visit the official company careers page to apply for this position.
