Principal Engineer, Cyber Defense

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

POSITION SUMMARY

 Sony Corporation of America, is seeking a Principal Engineer, Cyber Defense, to join the Corporate Information Security Division and Global Security Incident Response Team located in Reston, Virginia in a remote or hybrid role.   

This position will report to the Senior Manager, Cyber Defense Engineering and will be a member of the team that provides designs, engineering support, implementations and 24x7 support of the technology infrastructure that supports a global incident response team.  The Cyber Defense team is a pivotal part of Sony’s program to secure its information assets, services, and the products that depend on them, building trust with customers and stakeholders and protecting the privacy of Sony’s customers.   

  
JOB RESPONSIBILITIES   

• Lead engagements with Sony Group Companies (SGCs) to identify cyber security requirements, understand SGC’s corporate structure and IT environments, gather IT asset inventories, and facilitate implementation of GSIRT projects   

• Lead and support security engineering efforts for Microsoft and Identity Management platforms 

• Configure and deploy hardware and software based cyber security tools to locations on-prem and in cloud environments   

• On-board data from on-prem, cloud (IaaS), and software-as-a-service (SaaS) systems into GSIRT’s Security Incident Event Management (SIEM) system    

• Produce, evaluate, and improve on operational processes, procedures, and documentation  

• Assess vulnerabilities and security risks for potential impact to SGCs and work with SGCs to prioritize remediation or deployment of mitigating controls   

• Support and enable effective and efficient cyber security detection and response Engineering operations  

• Provide technical guidance and mentorship to other security engineers and team members.  

• Collaborate with cross-functional teams, including IT operations, security governance, legal, privacy, application development, and external vendors to ensure the security of Sony systems  

• Develop and report on security engineering program metrics and key performance indicators   ​

• Provide engineering and analysis support for cyber security incidents as required  

• Role requires flexible work hours and on-call duties during non-standard business hours to support the needs of global businesses  

• Other duties related to cyber defense as assigned   

QUALIFICATIONS FOR POSITION 

 Your qualifications and experience should include:  

• At least 7-10 years of experience in an enterprise-level security engineering role  

• Strong expertise and understanding of Microsoft Entra ID, Active Directory Domain Services, M365, and Azure Cloud platforms from a security context  

• Strong expertise and understanding of modern authentication and authorization protocols used in a federated