Senior Application Security Engineer

PlayStation Global is seeking a senior application security engineer to help shape secure software delivery end to end. This onsite role in San Diego, CA focuses on designing, implementing, testing, and mentoring solutions across the SDLC, with an emphasis on scalable security automation and practical guidance that teams can apply during everyday development.

In this position, you will lead security initiatives within Product Security, influence multiple teams to embed security throughout the build process, and translate security findings into reusable organizational assets that strengthen the company’s overall security posture.

What you’ll do

• Lead security initiatives across the SDLC while improving development practices through scalable automation.
• Conduct and guide threat modeling and security requirements early in the design phases.
• Partner with developers, architects, and product managers to align business goals with security needs.
• Lead security architecture work and code reviews for distributed systems.
• Perform hands-on testing to identify risks and drive remediation with vulnerability and incident response teams.
• Advance the Product Security strategy through cross-functional initiatives and cultural influence.
• Provide technically grounded, pragmatic recommendations that balance business and security risks.
• Capture lessons learned and convert them into reusable organizational assets that improve the security posture.
• Mentor engineers and practitioners to promote secure-by-default thinking and shared accountability.
• Demonstrate proactive leadership by coordinating teams to deliver measurable security and business impact.

Requirements

• 7+ years in information security and 3+ years in software development.
• Bachelor’s degree or equivalent in Computer Science, Information Security, or a related field.
• Effective communication and leadership skills, including the ability to influence both technical and non-technical collaborators, including management.
• Dedicated and proactive approach, finding opportunities and leading initiatives independently.
• Deep understanding of enterprise and cloud-native architectures and secure design principles.
• Expertise in network and web protocols including TCP/IP, TLS, HTTPS, OAuth 2.0, and OpenID Connect, plus common attack vectors.
• Proven ability to guide security development and code evaluations with actionable, risk-based recommendations.
• Experience across multiple programming languages (Java, C/C++, JavaScript, Python) and vulnerability mitigation such as OWASP Top 10.
• Experience integrating SAST, DAST, and dependency scanning into CI/CD pipelines.
• Familiarity with Agile and DevOps, including modern delivery practices.
• Hands-on experience with cloud technologies including AWS, Azure, GCP, Kubernetes, service mesh, and CDN, including secure configuration and identity management.
• Strong analytical and problem-solving skills using an attacker perspective to anticipate and simulate real-world attacks.
• Experience with penetration testing, automated testing, or testing frameworks such as JUnit, pytest, REST Assured, and Playwright.
• Security certifications preferred: GIAC, OSCP, CEH, CISSP, CCSP, or equivalent.

Technologies

• Java, C/C++, JavaScript, Python
• TCP/IP, TLS, HTTPS, OAuth 2.0, OpenID Connect
• OWASP Top 10
• SAST, DAST, dependency scanning, CI/CD
• Agile, DevOps
• AWS, Azure, GCP
• Kubernetes, service mesh, CDN
• Identity management
• JUnit, pytest, REST Assured, Playwright
• Penetration testing

Location: San Diego, CA (onsite)
Compensation: USD 177,300 - 265,900 per year
Experience level: Senior (7 years minimum)