Senior Manager, Cyber Defense

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

The Corporate Information Security Department (CISD), Global Security Incident Response Team (GSIRT) located in Reston, Virginia, is the cyber security response arm of Sony Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Mobile Communications (USA) Inc., Sony Interactive Entertainment, Sony Pictures Entertainment Inc., Sony Music Entertainment, and Sony/ATV Music Publishing LLC. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network and the Sony Entertainment Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth.
 

Position Summary
Sony Corporation of America is seeking a Senior Manager, Cyber Defense, to join the CISD, GSIRT located in Reston, VA.

This position will be part of the Cyber Defense Team (CDT) US2, supporting Sony companies headquartered in the western United States. The incumbent will lead the team that provides designs, engineering support, data source on-boarding, implementations and support of the technology infrastructure that supports a global incident response team.  The Cyber Defense team is a pivotal part of Sony’s program to secure its information assets, services, and the products that depend on them, building trust with customers and stakeholders and protecting the privacy of Sony’s customers.

Job Responsibilities:

• Manage a team of Cyber Defense Engineers, executing on the strategic vision of the organization, determining team priorities, assigning work, performing administrative actions, and other managerial duties

• Lead engagements with Sony Group Companies (SGCs) to identify cyber security requirements, understand Sony’s corporate structure and IT environments, gather IT asset inventories, and facilitate implementation of GSIRT projects

• Plan the deployment of hardware and software based cyber security tools to locations on-prem and in cloud environments

• Ensure data on-boarding goals as met from on-prem, cloud (IaaS), and software-as-a-service (SaaS) systems into GSIRT’s Security Incident Event Management (SIEM) system

• Identify requirements for operational processes, procedures, and documentation related to GSIRT’s cyber security engineering program and ensure they are developed in a timely manner

• Prioritize the review of vulnerabilities for potential impact to SGCs and work with SGCs to prioritize remediation or deployment of mitigating controls

• Monitor SIEM solutions for cyber security incident data and provide engineering support to incident response activities

• Develop and report on security engineering program metrics and key performance indicators

• Role requires flexible work hours and on-call duties during non-standard business hours to support the needs of a global corporation

• Other duties related to cyber defense as assigned

• Honesty, trustworthiness and ethical conduct are material requirements for the responsibilities outlined above

Job Qualifications:

• Experience leading or managing a technical team, preferably a team in a cyber defense related discipline

• Broad understanding of information technology, cyber security concepts, and cyber security tools

• Understanding of processes and procedures for the aggregation, transport, and on-boarding of machine data into SIEM solutions

• Experience with one or more programming languages, such as Python

• Working knowledge of networking technologies and protocols; including TCP/IP and standard Internet related protocols

• Competency in one or more data query languages, such as SPL

• Comfort working from the command line interface and leveraging shell scripts to automate repetitive tasks

• Experience with configuration management solutions, SaltStack or Ansible

• Basic understanding and awareness of privacy laws and regulations

• A degree in Computer Science, Computer Engineering, Cyber Security, Information Technology or related subject matter is preferred

• Experience with IaaS cloud providers, such as Amazon Web Services (AWS) and Azure, certifications preferred.

• Experience with CI/CD pipelines and tools, GitLab preferred.

• Experience with project management, preferable Agile management approaches and tools

• All candidates must be authorized to work in the US.

#LI-SC1

Sony is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, sex (including pregnancy), gender, national origin, citizenship, ancestry, age, physical or mental disability, military status, status as a veteran or disabled veteran, sexual orientation, gender identity or expression, marital or family status, genetic information, medical condition, or any other basis protected by applicable federal, state, or local law, ordinance, or regulation.

SCA will consider qualified applicants with arrest or conviction records in accordance with applicable law.

Disability Accommodation for Applicants to Sony Corporation of America

Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, Human Resources Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.