Senior Engineer, Cyber Threat Intelligence

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

POSITION SUMMARY

Sony Corporation of America (SCA) is seeking a highly motivated, self-driven Senior Cyber Threat Intelligence to join the Global Security Incident Response Team (GSIRT) Integrated Threat Defense (ITD). This position will be responsible for supporting an Enterprise Threat Analysis Program to secure Sony’s information assets, services, and the products that depend on them. This position will be hybrid (remote/on site) and will report to the Senior Manager, Global Threat Intelligence & Binary Defense.

JOB RESPONSIBILITIES 

• Perform static and dynamic analysis of samples, and reverse engineering in support of SOC investigations and proactive threat detection and prevention.

• Develop tools and methods for use in hunt and incident response activities.

• Collaborate with the threat intelligence team to perform proactive research and analysis of the latest threat actor tactics, techniques, and procedures (TTPs) to inform threat detection efforts.

• Research, build, and maintain detection capabilities for the latest threats across SIEM, log analytic, and security tool platforms.

• Support projects to improve SOC effectiveness, advancing technical capabilities on pace with threats.

• Support and integrate with incident response, threat intelligence, and overall security strategy as needed.

• Generate high quality documentation of research and analysis results, and relay processes and findings clearly and concisely to both technical and non-technical audiences.

• Prepare detailed analysis reports, products, cyber threat assessments, and briefings of security incidents and related intelligence for GSIRT and its stakeholders.

• Write high-quality threat reports tailored to Sony Group companies, regions, or industries where Sony operates.

• Provide support to the SOC during incident response and threat hunting activities that include threat modelling, cyber threat analysis support, research, and recommending relevant remediation and mitigation.

• Maintain awareness of the latest emerging threats and exploitation vectors and provide awareness to internal teams, leadership, and Sony Group company stakeholders on changes to the cyber threat landscape.

• Support projects to improve data collection, interpretation processes and initiatives regarding threat intelligence and information security.

• Develop and follow detailed operational processes and procedures.

• Perform other duties as assigned.

QUALIFICATIONS FOR POSITION 

Your qualifications and experience should include:  

• Minimum of 5 years' experience in one or more of the following areas: Information Security, Data Analytics, Intelligence Analysis with at least 3 years of experience in Information Security.

• 3 or more years of malware analysis, reverse engineering or forensic analysis experience.

• 3 years of experience performing log analysis and host/network forensic analysis in support of incident response or forensics.

• 2 year of experience developing network signature (e.g. Snort, Suricata) and endpoint threat detections.

• Expertise in one or more programming/scripting languages such as Python, Java, or PowerShell.

• Working knowledge of Reverse Engineering skills: familiar with debuggers, disassemblers, network protocols, file formats, sandboxes, packed and obfuscated codes and Reverse Engineering tools such as IDA Pro.

• Provide exemplary leadership in a challenging environment and influence the organization.

• Ability to manage multiple activities and events simultaneously, with a strong ability to prioritize multiple tasks and respond to high priority events, organizing and scheduling work effectively.

• Ability to operate effectively as part of a geographically dispersed team and work independently.

• Deep understanding of network defense principles, common attack vectors, and attacker techniques

• Demonstrated knowledge of common adversary tactics, techniques, and procedures (TTPs)

• Experience using threat intelligence tools and management platforms to identify, analyze and track cyber threats.

• Knowledge of the MITRE ATT&CK Framework, Cyber Kill Chain, Diamond Model of Intrusion Analysis, or other relevant network defense and intelligence frameworks preferred.

• Strong work ethic and commitment to accomplish assigned tasks with a sense of urgency.

• Excellent analytical and problem-solving skills

• Good communication and advocacy skills, both verbal and written, can express complex and technical issues in understandable language.

• All candidates must be authorized to work in the USA.

In addition to competitive pay and benefits, we offer an environment and culture that promotes Diversity, Equity, and Inclusion. We are committed to creating an inclusive employee experience for you to thrive as part of Sony’s purpose to “fill the world with emotion through the power of creativity and technology”. 

Benefits:    

SCA offers benefits-eligible employees (generally regular employees scheduled to work 20 or more hours a week) a comprehensive benefits program that offers coverage and support for employees and their family’s physical, emotional, and financial well-being.   

 What we offer you: 

• Comprehensive medical, prescription drug, dental, and vision coverage with coverage for spouses/domestic partners and child dependents, including access to a Health Savings Account (HSA) and Flexible Spending Account (FSA)  ​

• Employee assistance plan and comprehensive behavioral health benefits 

• Fertility benefits, including surrogacy, and adoption assistance programs   

• Basic and supplemental life insurance for employees as well as supplemental life insurance coverage for their spouses/domestic partners and children  

• Voluntary benefits such as group legal, identity theft protection, accident, and hospital indemnity insurance  

• Short-term & long-term disability plans   

• Paid parental and caregiver leave   

• 401(k) Plan with pre-tax, Roth, and after-tax options and company match with immediate vesting 

• Education assistance and student loan programs    

  Other Programs:

• ​​Time off to include vacation, paid holidays, sick leave, Summer Fridays (early release), and a winter break between Christmas and New Year’s Day (based on business needs) 

• Referral bonuses (subject to eligibility)   

• Matching gift program   

• A wide variety of employee business resource groups (EBRGs)   

• Special discounts on Sony products, offered exclusively to Sony employees 

• Employee stock purchase plan (Sony covers commissions and fees for your Sony stock purchases made through after-tax payroll deductions)   

• Annual incentive bonus 

The anticipated annual base salary for this position is $125,000 to $140,000. This range does not include any other compensation components or other benefits that an individual may be eligible for. The actual base salary offered depends on a variety of factors, which may include as applicable, the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, certifications or other professional licenses held, and the location in which the applicant lives and/or from which they will be performing the job.  

#LI-SC1

Sony is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, sex (including pregnancy), gender, national origin, citizenship, ancestry, age, physical or mental disability, military status, status as a veteran or disabled veteran, sexual orientation, gender identity or expression, marital or family status, genetic information, medical condition, or any other basis protected by applicable federal, state, or local law, ordinance, or regulation.

Disability Accommodation for Applicants to Sony Corporation of America

Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, Human Resources Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.

EEO is the Law

EEO is the Law Supplement

Right to Work (English/Spanish)

E-Verify Participation (English/Spanish)

While SCA does not require employees to be vaccinated against COVID-19, there are certain Sony offices that require employees to be vaccinated in order to enter.  If you will be located at or travel to those offices, you will be required to be fully vaccinated to enter.  The Company will consider requests for reasonable accommodations for documented medical reasons and for sincerely held religious beliefs in accordance with applicable law.  Please do not include proof of vaccination status or any indication of a possible request for a vaccination accommodation when submitting your application materials.  If applicable, the Company will follow up with you directly to request proof of vaccination and to discuss any potential accommodations.