Senior Engineer, Cyber Threat Intelligence

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

POSITION SUMMARY

Sony Corporation of America (SCA) is seeking a highly motivated, self-driven Senior Cyber Threat Intelligence to join the Global Security Incident Response Team (GSIRT) Integrated Threat Defense (ITD). This position will be responsible for supporting an Enterprise Threat Analysis Program to secure Sony’s information assets, services, and the products that depend on them. This position will be hybrid (remote/on site) and will report to the Senior Manager, Global Threat Intelligence & Binary Defense.

JOB RESPONSIBILITIES 

• Perform static and dynamic analysis of samples, and reverse engineering in support of SOC investigations and proactive threat detection and prevention.

• Develop tools and methods for use in hunt and incident response activities.

• Collaborate with the threat intelligence team to perform proactive research and analysis of the latest threat actor tactics, techniques, and procedures (TTPs) to inform threat detection efforts.

• Research, build, and maintain detection capabilities for the latest threats across SIEM, log analytic, and security tool platforms.

• Support projects to improve SOC effectiveness, advancing technical capabilities on pace with threats.

• Support and integrate with incident response, threat intelligence, and overall security strategy as needed.

• Generate high quality documentation of research and analysis results, and relay processes and findings clearly and concisely to both technical and non-technical audiences.

• Prepare detailed analysis reports, products, cyber threat assessments, and briefings of security incidents and related intelligence for GSIRT and its stakeholders.

• Write high-quality threat reports tailored to Sony Group companies, regions, or industries where Sony operates.

• Provide support to the SOC during incident response and threat hunting activities that include threat modelling, cyber threat analysis support, research, and recommending relevant remediation and mitigation.

• Maintain awareness of the latest emerging threats and exploitation vectors and provide awareness to internal teams, leadership, and Sony Group company stakeholders on changes to the cyber threat landscape.

• Support projects to improve data collection, interpretation processes and initiatives regarding threat intelligence and information security.

• Develop and follow detailed operational processes and procedures.

• Perform other duties as assigned.

QUALIFICATIONS FOR POSITION 

Your qualifications and experience should include:  

• Minimum of 5 years' experience in one or more of the following areas: Information Security, Data Analytics, Intelligence Analysis with at least 3 years of experience in Information Security.

• 3 or more years of malware analysis, reverse engineering or forensic analysis experience.

• 3 years of experience performing log analysis and host/network forensic analysis in support of incident response or forensics.

• 2 year of experience developing network signature (e.g. Snort, Suricata) and endpoint threat detections.

• Expertise in one or more programming/scripting languages such as Python, Java, or PowerShell.

• Working knowledge of Reverse Engineering skills: familiar with debuggers, disassemblers, network protocols, file formats, sandboxes, packed and obfuscated codes and Reverse Engineering tools such as IDA Pro.

• Provide exemplary leadership in a challenging environment and influence the organization.

• Ability to manage multiple activities and events simultaneously, with a strong ability to prioritize multiple tasks and respond to high priorit