Threat Intelligence Investigator

About this role

Why Sony Interactive Entertainment?

Sony Interactive Entertainment isn’t just the Best Place to Play — it’s also the Best Place to Work. Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand. As a subsidiary of Sony Group Corporation, we’re part of a proud legacy of innovation and excellence. SIE is a dynamic technology company, delivering cutting-edge hardware and network services to more than 100 million people and an entertainment leader, home to some of the most beloved and recognizable intellectual properties (IP) in the world. Our role at SIE is to create and nurture the experiences under the PlayStation brand, a name synonymous with entertainment excellence and creativity.

Threat Intelligence Investigator (Contract) * San Mateo, CA (preferred) or San Diego, CA (hybrid) - will require 2 -3 days onsite

*Please note: This is a temporary position with an initial 12-month term and the possibility of extension, employed through our staffing partner, Yoh.

Hours: (Lunchtime to evening): 11am/12pm/1pm - 7pm/8pm/9pm / as needed Days: Sunday to Thursday

The Role;

The Threat Intelligence Investigator is a key member of the Corporate Security team responsible for receiving, evaluating, investigating, and escalating threats and security-related incidents across internal and external platforms. The successful candidate will leverage investigative methodologies, intelligence resources, and data systems to assess the credibility of global threats, support proactive risk management efforts, and collaborate with law enforcement agencies (LEA) and internal stakeholders to mitigate risk.

This role supports investigations and threat management activities involving consumer platforms, employees, business operations, studios, assets, and the company’s reputation. The Investigator will also contribute to intelligence products, operational reporting, and proactive threat identification capabilities.

Working closely with Consumer Services, Online Safety, Moderation, Human Resources, Legal, IT Operations, Engineering, GSOC, and relevant studios, the Investigator will help ensure effective and consistent investigative, intelligence, and threat management processes.

This role is critical to identifying, analyzing, investigating, and escalating incidents that may impact SIE personnel, assets, business operations, or brand reputation.

What You'll be Doing

• Conduct investigations into threats targeting SIE platforms, services, and associated ecosystems, including internal incidents involving potential corporate security breaches, ensuring appropriate escalation and stakeholder engagement.

• Conduct investigative enquiries into security incidents, threats, policy violations, and other corporate security matters, ensuring appropriate escalation, documentation, and stakeholder engagement.

• Gather, review, preserve, and assess relevant investigative material, including CCTV footage, access control records, OSINT, internal reporting, and other available evidence sources.

• Conduct interviews and information gathering with relevant stakeholders, witnesses, and involved parties to support investigative fact-finding and threat assessment activities.

• Analyze investigative information to establish timelines, identify behavioral indicators, assess risk, and support informed operational decision-making.

• Produce clear, accurate, and objective investigative documentation, reports, and case updates in accordance with established procedures and reporting standards.

• Prioritize and manage cases end-to-end based on threat level and urgency, ensuring all investigative activity is accurately documented and integrated into case management and reporting mechanisms.

• Receive, process, and evaluate threat reports using investigative tools and supporting resources to assess credibility and risk.

• Develop and disseminate actionable intelligence to support threat management, risk mitigation, and informed decision-making across the organization.

• Support strategic intelligence development activities through horizon scanning, trend monitoring, and collection of relevant threat intelligence to identify emerging risks impacting SIE employees, operations, studios, assets, and brand reputation.

• Contribute to the production of intelligence reporting, threat trend analysis, and operational risk assessments that support proactive threat management, stakeholder awareness, and informed security decision-making across the organization.

• Monitor and assess emerging threat trends, tactics, techniques, and procedures (TTPs), producing written intelligence assessments that support proactive threat management and maintain a forward-looking view of the corporate security threat landscape.

• Act to safeguard people, assets, and business operations through timely and responsible decision-making.

• Ensure compliance with SIE policies, procedures, and applicable global legal and regulatory requirements (such as the Digital Services Act).

• Report credible threats to law enforcement and collaborate with relevant agencies, providing clear, evidence-based rationale in line with SIE protocols.

• Build and maintain effective relationships with law enforcement, statutory bodies, industry partners, and internal stakeholders to support coordinated threat response and intelligence sharing.

• Support knowledge sharing and capability building through training, presentations, and engagement with internal and external partners.

• Prepare operational and performance management reports, highlighting trends, quality metrics, categorization, workload management, and other key operational insights to support continuous improvement initiatives.

• Contribute to continuous improvement initiatives, including process refinement, post-incident debriefs, lessons learned activities, and operational maturity improvements.

• Support additional investigations, threat-related activities, event security planning and execut

Similar jobs

• Threat Intelligence Engineer — Anthropic · Remote-Friendly (Travel-Required) | San Francisco, CA | Washington, DC
• Threat Investigator US — 10alabs · Remote
• Technical Threat Investigator, Threat Intel Engineering — Openai · Remote
• Principal Threat Intelligence Analyst — Huntress · Remote
• Technical Cyber Threat Investigator — Anthropic · Remote-Friendly (Travel-Required) | San Francisco, CA | Washington, DC
• Cyber Threat Inteligence Analyst — Intersystems · Boston, MA
• Associate Principal Threat Intelligence Analyst — Rockstargames · Carlsbad, California, United States
• Associate Principal Threat Intelligence Analyst — Rockstargames · Andover, Massachusetts, United States