シニアセキュリティエクスポージャー＆アーキテクチャエンジニア/Senior Security Exposure & Architecture Engineer

Japan, Tokyo · JPN-Tokyo-Sony City · Hybrid · Posted Oct 1, 2026

At a glance

Sony Interactive Entertainment is seeking a Senior Security Exposure & Architecture Engineer to drive security risk reduction across the company by combining Global Vulnerability Management and Global Security Architecture.
The role involves bridging real-world vulnerability and security exposure data with preventative secure design, standardized architectures, and security controls across cloud-native, AI-enabled, gaming, and enterprise environments.
The successful candidate will collaborate closely with Japanese and US-based global teams, security, infrastructure, and engineering stakeholders to analyze root causes and implement scalable mitigation strategies.

Contribute across joint Global Vulnerability Management (GVM) and Global Security Architecture (GSA) initiatives to advance an integrated operating model.
Review new and existing services, platforms, and infrastructure designs to identify security weaknesses, attack paths, and control gaps early.
Analyze security exposures using exploitability, business and asset criticality, supporting evidence, and remediation complexity to recommend priorities and treatment options.
Support the full lifecycle of security exposures including discovery, enrichment, triage, validation, decisions, mobilization, verification, and learning.
Partner with architecture, infrastructure, cloud, and engineering teams to translate recurring exposures into scalable design patterns and hardening standards.
Design and advise on secure cloud-native, hybrid, containerized, SaaS, PaaS, and on-premises environments including AWS and Google Cloud.
Provide architecture-informed remediation guidance for cloud, network, endpoint, server, container, identity, application, platform, and AI-enabled systems.
Contribute to authorized security validation activities such as proof-of-concept testing, attack path analysis, and control effectiveness reviews.
Develop reusable technical guidance and utilize security tooling, data, AI, and automation responsibly to improve visibility and team effectiveness.
Communicate security issues and design tradeoffs clearly, leading scoped work through completion across global stakeholders.

Demonstrated experience in information security, security engineering, systems engineering, cloud security, infrastructure security, product security, security architecture, or a related field.
Strong foundation in security architecture principles including architecture review, secure design, reference patterns, control selection, and security requirements in complex production environments.
Working knowledge of vulnerability and exposure management concepts including threat-informed prioritization, validation, remediation workflows, and evidence-based risk decisions.
Hands-on experience assessing, securing, designing, or operating cloud-based, containerized, network, platform, application, identity, or enterprise infrastructure environments.
Experience with security assessment, exposure analysis, vulnerability scanning, validation, architecture review, or secure implementation standards.
Knowledge of operating systems, networking, identity, authentication, encryption, key management, segmentation, firewalls, WAFs, DDoS mitigation, and common enterprise security controls.
Business-level proficiency in Japanese and English, including conducting technical discussions in English, explaining technical risk in business terms, and influencing without direct authority.
Bachelor's degree in Computer Science, Information Security, Mathematics, Engineering, a related field, or equivalent practical experience.

Experience spanning both vulnerability or threat exposure work and security architecture, design review, or security engineering work.
Experience with AWS, Google Cloud, hybrid cloud, Kubernetes, CI/CD security, Infrastructure as Code, SaaS, PaaS, multi-tenant systems, AI system security, or modern application architectures.
Experience validating exploitability through testing, proof-of-concept development, attack path analysis, adversarial testing, or control effectiveness reviews.
Experience building or improving security reporting, analytics, automation, data-driven prioritization, reference architectures, or cloud governance capabilities.
Experience working across global teams and time zones, particularly with Japan- and United States-based stakeholders, and familiarity with business culture in Japan.
Master's degree or Ph.D. in Computer Science, Information Security, Mathematics, Engineering, a related field, or equivalent advanced experience.