Staff Security Architect

Description

The company behind the PlayStation brand is hiring a Staff Security Architect. Sony Interactive Entertainment is a subsidiary of Sony Group Corporation. It delivers hardware and network services to more than 100 million people and also creates entertainment, including well-known intellectual properties (IP).

The role covers security architecture in four areas: enterprise, cloud, platform, and AI-enabled technology. You will work with engineering, infrastructure, product, and security teams to find systemic risk, build scalable security patterns, and help the company adopt new technology safely, including generative AI and agentic systems. The work spans complex, global environments.

Responsibilities

• Design, review, and approve security architecture for enterprise, cloud, SaaS, platform, and application environments, weighing business goals, engineering limits, and risk.
• Lead cloud security architecture on AWS, Google Cloud, and hybrid setups. Cover identity, network security, data protection, logging and monitoring, key management, workload isolation, and security posture management, using both native and third-party controls.
• Define and review security architecture for SaaS and PaaS platforms. Cover identity federation, privileged access, tenant configuration, data protection, API and integration security, logging, third-party risk, and safe use of enterprise SaaS.
• Lead security across the software delivery lifecycle: source control, CI/CD pipelines, build systems, artifact repositories, infrastructure as code, secrets management, code and artifact signing, software provenance, deployment automation, and developer platform controls.
• Lead security architecture for AI-enabled systems, including generative AI, large language models, retrieval-augmented generation, AI agents, model-serving platforms, and AI-assisted developer workflows.
• Design mitigations for prompt injection, insecure tool use, excessive agency, sensitive-data disclosure, model or supply-chain compromise, unsafe output handling, and abuse of AI services.
• Set security requirements for AI data, models, prompts, embeddings, vector stores, APIs, tools, and agent identities. Cover least-privilege access, secrets, encryption, isolation, provenance, logging, monitoring, and lifecycle controls.
• Design and improve identity, authentication, authorization, network security, key management, cryptography, application security, and production security controls across complex environments.
• Find security design gaps in current and planned systems. Turn them into practical architecture changes, reference patterns, hardening standards, preventative controls, and automation that makes security more repeatable and easier to run.
• Lead technical work across multi-disciplinary teams. Explain risks, tradeoffs, and recommended solutions clearly to engineering leaders, business stakeholders, and non-security audiences.

Requirements

• You have 15+ years of experience in security architecture, security engineering, product security, cloud security, infrastructure security, or a related field, including senior or staff-level leadership.
• You have deep knowledge of security architecture across cloud, application, network, identity, platform, infrastructure, and enterprise environments.
• You have hands-on experience designing or securing cloud and containerized environments, ideally on AWS or Google Cloud.
• You have a solid grasp of modern identity and access management, PKI, OAuth/OIDC, SAML, TLS, VPNs, secrets management, key management systems, cloud KMS, and HSMs.
• You have expertise in network and application security controls, including WAFs, NGFWs, segmentation, DMZ design, DDoS mitigation, load balancing, proxies, intrusion detection and prevention, and host-based controls.
• You have experience with secure software development, threat modeling, CI/CD and developer platforms, application security, and engineering mitigations across the software lifecycle.
• You have working knowledge of AI and ML security and can assess risk in generative AI, LLM, and agentic architectures, including data flows, trust boundaries, model access, and tool integrations.
• You bring strong critical thinking, risk prioritization, communication, and influence skills, and you can lead through ambiguity across global, cross-functional teams.
• You hold a Bachelor's degree in Computer Science, Mathematics, Engineering, Information Security, or equivalent practical experience.
• Preferred: experience securing AI/ML platforms, generative AI applications, model gateways, RAG architectures, vector databases, or agentic workflows in production.
• Preferred: experience with AI security evaluation, red teaming, adversarial testing, model abuse testing, or control validation for AI-enabled systems.
• Preferred: experience securing large-scale Linux, distributed, multi-tenant, or high-availability production environments.
• Preferred: development or automation experience in Python, C++, Java, or similar languages.
• Preferred: recognized technical leadership through patents, publications, open-source work, conference talks, teaching, or security community involvement.
• Preferred: penetration testing, adversarial security, or attacker-minded design experience.
• Preferred: a Master's degree or Ph.D. in Computer Science, Mathematics, Engineering, Information Security, or a related field.

Conditions

The company runs background checks at the offer stage for all new hires, which may include criminal background checks for some roles, and this requires processing personal information.