> Markdown version of [/jobs/ext/4027197-senior-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/4027197-senior-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Application Security Engineer

- **Company:** Sony Interactive Entertainment
- **Location:** New York, NY, United States
- **Experience:** Expert
- **Salary:** $177,300.0 - $265,900.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), Adobe InDesign, Agile Methodology, Amazon Web Services, Software System Penetration Testing, Automation of Tests, Microsoft Azure, C++ (Programming Language), Cloud Computing, Cloud Engineering, Code Review, Cyber Security, DevOps, Distributed Systems, Identity and Access Management, Internet Protocol, Junit, Python (Programming Language), OAuth, Open Web Application Security, Systems Development Life Cycle, Openid Connect, Software Engineering, TCP/IP, Google Cloud, Istio, Software Security, Pytest, Kubernetes, Information Technology, Playwright, Restful APIs, Static Application Security Testing, Vulnerability Analysis, Programming Languages, Dynamic Application Security Testing
- **Published:** October 30, 2026
- **Apply:** https://www.careerbuilder.com/job-details/senior-application-security-engineer-new-york-ny--efc28de6-07a0-4e03-ba94-f7b0c5368cc3

## About the Role

Applications Security, Software Engineering, PlayStation, IP (Internet Protocol), Technical Delivery, Gaming, Testing, Leadership, Mentoring, Applications Security, * 7+ years in information security and 3+ years in software development.

 * Bachelor's degree or equivalent in Computer Science, Information Security, or related field.
 * Effective communication and leadership abilities; capable of influencing technical and non-technical collaborators including management.
 * Dedicated and proactive, finding opportunities and leading initiatives independently.
 * Deep understanding of enterprise and cloud-native architectures and their secure design.
 * Expertise in network and web protocols (TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect) and common attack vectors.
 * Proven expertise in guiding security development and code evaluations and providing actionable, risk-based recommendations.
 * Skilled in multiple programming languages (e.g., Java, C/C++, JavaScript, Python) and mitigating vulnerabilities such as OWASP Top 10.
 * Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines.
 * Familiar with Agile, DevOps, and modern delivery practices.
 * Hands-on experience with cloud technologies (AWS, Azure, GCP, Kubernetes, service mesh, CDN) including secure configuration and identity management.

Desired Experience

 * Strong analytical and problem-solving skills with an attacker perspective - able to anticipate and simulate real-world attacks.
 * Experience in penetration testing, automated testing, or testing frameworks (JUnit, pytest, REST Assured, Playwright).
 * Security certifications preferred (GIAC, OSCP, CEH, CISSP, CCSP, or equivalent).

## Description

* Lead security initiatives across the SDLC and improve development practices through scalable automation.
 * Conduct and guide threat modeling and security requirements early in design phases.
 * Partner with developers, architects, and product managers to align business goals with security needs.
 * Lead security architecture and code reviews for distributed systems.
 * Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams.
 * Advance the Product Security strategy through multi-functional initiatives and cultural influence.
 * Balance business and security risks through technically grounded, pragmatic recommendations.
 * Translate lessons learned into reusable organizational assets that enhance overall security posture.
 * Mentor engineers and practitioners, promoting secure-by-default thinking and shared accountability.
 * Demonstrate proactive leadership, coordinating teams to deliver measurable security and business impact.