Executive Director, Application Security Architect

Executive Director, Application Security Architect Join to apply for the Executive Director, Application Security Architect role at Sony Pictures Entertainment
Executive Director, Application Security Architect
Join to apply for the Executive Director, Application Security Architect role at Sony Pictures Entertainment
We are seeking a visionary and hands-on Executive Director of Security Architecture with mature skill in Application Security/DevSecOps, Data Security and Cloud who will excel in leading the strategic design, implementation, and continuous improvement of Sony Pictures application security posture. The ideal candidate will have previous experience in application architecture and engineering and is now focused on information and cybersecurity to define robust security design patterns, reference architecture across applications, data, and cloud environments, proactively addressing cyber risks and promoting secure coding practices aligned with the Sony Pictures goals.
Strategic Vision: Develop and articulate a comprehensive security architecture strategy for application, data and cloud for Sony Pictures information and content assets. Define, document, and promote security architecture, DevSecOps, and technical standards throughout Sony Pictures.
Lead the development and implementation of comprehensive security architecture strategies for application, data and cloud environments to protect against current and emerging threats.
Architecture Design and Engineering: Lead hands-on design and implementation reviews of security solutions across application, data and cloud domains. Thoroughly assess security risks in existing and planned systems and infrastructure. Recommend design patterns and security best practices for technology and application implementations.
Research, evaluate, and recommend cutting-edge security technologies and tools. data security, cloud security, application security).
Liaise with IT and security operations teams to define and orchestrate POC testing for shortlisted security solutions.
Enterprise Security: Work closely with IT infrastructure, application development, DevSecOps, and business stakeholders to embed application security principles throughout all phases of technology development and deployment.
Collaborate with IT and business units to integrate security best practices into the development lifecycle of projects and technology initiatives.
~ NIST, ISO 27001, PCI DSS, OWASP, SAFECode) for designing systems and processes that not only protect data but also demonstrate adherence to industry standards and regulations.

Mastery of Security Architecture Principles: Deep understanding of defense-in-depth strategies, zero-trust models, identity and access management (IAM), AI Security, Product Security, Threat modeling, GPDR and privacy, vulnerability assessment techniques, DevSecOps, Secure Coding Principles and Practices.
Application Security Expertise: Demonstrated experience with Full Stack WebApp/API, firewalls (WAFs), secure software development lifecycles (S-SDLCs), DevSecOps, IaC, Docker/Container Security, Data Security, static/dynamic application security testing (SAST/DAST), API security, Authentication/Authorization Best Practices, and Secure Coding Standards and Techniques.
Cloud Security Expertise: Proficient in cloud security models (IaaS, PaaS, SaaS), cloud-native security tools, encryption and key management, privileged access management (PAM), security posture and compliance within cloud environments, mainly AWS and Azure.
Network Security Expertise: Excellent knowledge of firewalls, intrusion detection/prevention systems (IDS/IPS), network segmentation, VPNs, network access control (NAC), DMZ design, and DDoS mitigation.
Demonstrated knowledge of NIST Cybersecurity Framework, ISO 27001/27002, PCI DSS (if handling payment card data), OWASP, SAFECode, and other relevant entertainment industry guidelines such as TPN and MotionLabs.
Translation to Practice: The ability to take concepts from frameworks and benchmarks and apply them practically to the design of security solutions. This includes mapping controls, risk assessment techniques, and documentation in alignment with standards.
Capacity to align security objectives with Sony broader business and Cybersecurity goals, effectively quantifying risks and prioritizing initiatives for optimal impact.
The ability to translate technical concepts for non-technical audiences and secure buy-in at the executive level.
Bachelor's degree in Computer Science, Information Security, or a related field. Minimum of 10+ years of progressive experience in cybersecurity, application security engineering, with at least 5+ years in a security architecture leadership role with hands-on experience.
We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.
To request an accommodation for purposes of participating in the hiring process, you may contact us at SPE_Accommodation_Assistance@spe.sony.com. Employment type Full-time

Job function Information Technology
Referrals increase your chances of interviewing at Sony Pictures Entertainment by 2x
Get notified about new Director of Application Security jobs in Culver City, CA .
Director of Application Security / Fully Remote / Financial Services
Workday Application Security & Controls Director
Director, Senior Cloud Security Architect
Senior ERP Business Systems Analyst (Oracle HCM) - Remote
ERP Business Systems Analyst (Oracle HCM) - Remote
Were unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#