Principal Cyber Defense Engineer

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.

POSITION SUMMARY

We are seeking a highly skilled and experienced Principal Cyber Defense Engineer to join our newly formed Cyber Defense Team at Sony. This role is pivotal in ensuring the security and integrity of our systems by managing cyber defense operations, facilitating data onboarding, and supporting network administration tasks. The ideal candidate will have a strong background in security engineering, with a focus on automation and process improvement. Additionally, this role involves acting as an internal consultant to our operating companies, providing guidance and support to meet their security needs, and assisting with vulnerability assessments and remediation efforts where needed.

JOB RESPONSIBILITIES

Data Onboarding:

1. Support the data onboarding process into Splunk, ensuring accurate and efficient data collection.
2. Utilize methods such as Syslog (TLS), HTTP Event Collector (HEC), AWS S3, and Microsoft Azure EventHub for data integration.
3. Maintain and optimize Splunk Universal Forwarder (UF) and Heavy Forwarder (HF) configurations.
4. Ensure data normalization using Splunk's Common Information Model (CIM) for consistent and efficient searching, correlation, and reporting.

Cyber Defense Operations:

1. Focus on automation to streamline and enhance security processes.
2. Work with Sony Companies to assist with managing and optimize Microsoft Defender MDE.
3. Integrate data into the SIEM by onboarding data via methods such as syslog and HTTP event forwarders.
4. Act as the primary point of contact for operating companies, assisting with connections to the internal GSIRT group.
5. Develop and implement security measures and protocols.
6. Collaborate with the Incident Response (IR) team to ensure comprehensive security coverage.
7. Perform basic network administration tasks, such as logging into firewalls and checking versions.
8. Support general project tasks related to network security.
9. Proactively reach out to operating companies to understand their security needs and areas for improvement.
10. Provide expert guidance and develop tailored security plans to address specific requirements.
11. Conduct internal research and leverage knowledge to offer actionable recommendations.

Vulnerability Management:

1. Work with operating companies to prioritize attack surface management findings.
2. Provide remediation guidance and support to address identified vulnerabilities.
3. Ensure timely and effective resolution of security vulnerabilities.

Process Development:

1. Establish and document new processes and procedures.
2. Continuously improve existing processes to enhance efficiency and effectiveness.

Honesty, trustworthiness and ethical conduct are material requirements for the responsibilities outlined above.

QUALIFICATIONS FOR POSITION

Your qualifications and experience should include:

Required Skills

1. Splunk Data Onboarding
2. Experience with Splunk Universal Forwarder (UF) and Heavy Forwarder (HF)
3. Proficiency with HTTP Event Collector (HEC)
4. Familiarity with data onboarding methods: Syslog (TLS), AWS S3, Microsoft Azure EventHub
5. Splunk Administration and Usage Building dashboards, reports, and advanced queries
6. Understanding of Splunk's Common Information Model (CIM)
7. Project Management and Collaboration
8. Handling tight deadlines and multiple projects
9. Collaborating with infrastructure engineering and security teams

Preferred Skills

1. Big Data and Data Platforms
2. Familiarity with other big data tools like ELK (Elasticsearch, Logstash, Kibana)
3. Advanced Splunk Features
4. Knowledge of Splunk Database (DB) Connect
5. Understanding of Summary Index and how to exclude events from being indexed
6. Familiarity with important Splunk configuration files
7. Security Knowledge Vulnerability management and attack surface reduction
8. Experience with Microsoft Defender
9. Implementing and maintaining SIEM logging standards
10. Creating security reports and escalating issues
11. General IT Skills
12. Adaptability to significant changes in projects or work environments
13. Ability to conduct independent research and self-learning

Experience

1. Extensive experience in cyber defense and security engineering, preferably as a principal or lead role within a cyber defense team
2. Proven track record of managing and optimizing security operations with a strong emphasis on automation.
3. Demonstrated ability to leverage automation tools and techniques to streamline security operations and improve efficiency.
4. Experience in scripting and automating tasks using Python or other relevant programming languages.
5. Proven ability to integrate and automate security tools and platforms, such as Microsoft Defender MDE and Splunk.
6. Experience in creating automated workflows for vulnerability management and remediation.
7. CISSP, CISM, or other relevant security certifications is a plus
8. Excellent communication and interpersonal skills.
9. Strong problem-solving and analytical abilities.
10. Ability to work independently and as part of a team.
11. Comfortable with reaching out to and consulting with internal stakeholders.
12. All candidates must be authorized to work in the USA.

Benefits:

1. Comprehensive medical, prescription drug, dental, and vision coverage with coverage for spouses/domestic partners and child dependents, including access to a Health Savings Account (HSA) and Flexible Spending Account (FSA)
2. Employee assistance plan and comprehensive behavioral health benefits
3. Fertility benefits, including surrogacy, and adoption assistance programs
4. Basic and supplemental life insurance for employees as well as supplemental life insurance coverage for their spouses/domestic partners and children
5. Voluntary benefits such as group legal, identity theft protection, accident, and hospital indemnity insurance
6. Short-term & long-term disability plans
7. Paid parental and caregiver leave
8. 401(k) Plan with pre-tax, Roth, and after-tax options and company match with immediate vesting
9. Education assistance and student loan programs

Other Programs:

1. Flexible Work Arrangements, including remote and hybrid work schedules
2. Time off to include vacation, paid holidays, sick leave, Summer Fridays (early release), and a winter break between Christmas and New Year's Day (based on business needs)
3. Referral bonuses (subject to eligibility)
4. Matching gift program
5. A wide variety of employee business resource groups (EBRGs)
6. Special discounts on Sony products, offered exclusively to Sony employees
7. Employee stock purchase plan (Sony covers commissions and fees for your Sony stock purchases made through after-tax payroll deductions)
8. Annual incentive bonus

The anticipated annual base salary for this position is $175,000 to $190,000. This range does not include any other compensation components or other benefits that an individual may be eligible for. The actual base salary offered depends on a variety of factors, which may include as applicable, the qualifications of the individual applicant for the position, years of relevant experience, specific and unique skills, level of education attained, certifications or other professional licenses held, and the location in which the applicant lives and/or from which they will be performing the job.

#LI-SC1

Sony is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, sex (including pregnancy), gender, national origin, citizenship, ancestry, age, physical or mental disability, military status, status as a veteran or disabled veteran, sexual orientation, gender identity or expression, marital or family status, genetic information, medical condition, or any other basis protected by applicable federal, state, or local law, ordinance, or regulation.

SCA will consider qualified applicants with arrest or conviction records in accordance with applicable law.

Disability Accommodation for Applicants to Sony Corporation of America

Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, Human Resources Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.

EEO is the Law

EEO is the Law Supplement

Right to Work (English/Spanish)

E-Verify Participation (English/Spanish)

While SCA does not require employees to be vaccinated against COVID-19, there are certain Sony offices that require employees to be vaccinated in order to enter. If you will be located at or travel to those offices, you will be required to be fully vaccinated to enter. The Company will consider requests for reasonable accommodations for documented medical reasons and for sincerely held religious beliefs in accordance with applicable law. Please do not include proof of vaccination status or any indication of a possible request for a vaccination accommodation when submitting your application materials. If applicable, the Company will follow up with you directly to request proof of vaccination and to discuss any potential accommodations.