About the Opportunity
Help shape the future of cloud and AI security at Sony Pictures Entertainment.
At Sony Pictures Entertainment, technology plays a critical role in enabling creativity, innovation, and the global entertainment business. Protecting our cloud environments, digital assets, and emerging technologies is essential to that mission.
We're looking for a Lead Cloud Security Operation Engineer who is passionate about solving complex security challenges, improving how technology operates, and helping build secure, scalable cloud environments.
In this hands-on role, you'll help strengthen security across our enterprise Cloud ecosystem, including AWS, Microsoft Azure, and Google Cloud. You’ll take a deep role in advancing our Cloud Security Posture Management (CSPM) capabilities, improving security visibility, automating controls, and partnering with technology and stakeholder teams to reduce risk.
You'll also have the opportunity to help shape how we securely adopt emerging technologies, including Generative AI, large language models, and AI-enabled applications.
This is an opportunity to do more than maintain security controls. You'll help improve and evolve our cloud security capabilities, influence technical decisions, and make a meaningful impact on how we protect and enable the business.
- WHAT YOU'LL DO:
Drive Cloud Security Operations & Continuous Improvement- Provide day-to-day engineering, operational support and continuous improvement of cloud security posture management (CSPM) capabilities across AWS, Azure, and GCP.
- Identify, assess, and prioritize Cloud Security risks, including misconfigurations, excessive permissions, exposed resources, vulnerabilities, and configuration drift.
- Partner with Cloud Operations, Infrastructure, and application teams to drive timely remediation of security findings and validate successful resolution.
- Develop security dashboards, metrics, and reporting to provide visibility into cloud security posture, emerging risks, and remediation progress.
- Improve cloud security operations through automation, repeatable processes, and risk-based prioritization.
- Provide advanced technical troubleshooting and escalation support for complex cloud security issues.
- Strengthen Security Across Our Cloud Platforms
- Implement and maintain security controls across AWS, Azure, and GCP, including identity and access Management, network security, encryption, logging, and workload protection.
- Apply consistent security standards across cloud environments while accounting for platform-specific requirements.
- Leverage cloud-native security tools and CSPM/CNAPP platforms to improve security monitoring, configuration management, and continuous compliance.
- Strengthen identity security through least-privilege access, privileged access management, workload identities, secrets, management, and Zero Trust principles.
- Help secure modern cloud workloads, including containers, Kubernetes, and serverless technologies.
- Identify opportunities to improve security architecture, reduce risk, and strengthen operational resilience.
- Improve Security Visibility, Monitoring and Automation
- Enhance security monitoring across cloud infrastructure, applications, identities, workloads, and data.
- Integrate cloud security findings, audit logs, and telemetry into enterprise security monitoring and analytics platforms.
- Develop and improve dashboards, alerts, and reporting that help teams proactively identify and address security operations risks.
- Strengthen logging coverage, monitoring effectiveness, and visibility into unauthorized configuration changes, abnormal activity, and policy violations.
- Build and enhance automation using scripting, APIs, and cloud-native tools to streamline security assessments, remediation, reporting, and operational workflows.
- Help Shape the Future of AI Security
- Partner with security, cloud, and application teams to establish practical security controls for emerging AI technologies, including Generative AI, large language models, AI agents, and AI-enabled applications.
- Help assess and address AI-related risks, including sensitive-data exposure, prompt injection, excessive permissions, insecure integrations, and unauthorized access.
- Contribute to security guardrails for AI workloads, including identity, access controls, data protection, logging, and appropriate human oversight.
- Support the secure adoption of enterprise AI platforms such as Amazon Bedrock, Azure AI, and Google Vertex AI.
- Apply emerging AI security practices and industry guidance to help protect AI-enabled environments.
- Explore opportunities to responsibly leverage AI and automation to improve security analytics, operational efficiency, and risk management.
- Collaborate, Influence & Lead
- Serve as a trusted technical partner to Cloud Operations, Infrastructure, Architecture, Application teams and Governance, Risk & Compliance teams.
- Provide practical security guidance for cloud architecture that balances risk management with business needs, scalability, reliability, and innovation.
- Translate complex technical risks into clear recommendations and actionable solutions.
- Contribute to cloud security standards, operating procedures, architecture documentation, and continuous improvement initiatives.
- Mentor fellow engineers, share technical knowledge, and help strengthen cloud security operations engineering practices across the organization.
WHAT YOU BRING:
We're looking for someone with strong cloud security fundamentals, hands-on engineering experience, and a passion for solving problems. You don't need to have worked with every technology in our environment to make an impact.
Required Qualifications
- Bachelor's degree in Computer Science, Information Security, Engineering, IT, or equivalent experience.
- 6 + years of experience in Cloud Engineering, Infrastructure, Cybersecurity, Security Operations, or a related technical field.
- 4 + years of hands-on experience securing or operating enterprise cloud environments.
- Strong cloud security engineering experience with AWS, Microsoft Azure, or Google Cloud, including familiarity with multi-cloud environments.
- Hands-on experience with Cloud Security Posture Management (CSPM), Cloud-Native Application Protection Platforms (CNAPP), or comparable cloud configuration security tools and practices.
- Strong understanding of cloud security fundamentals, including identity and access management, network security, encryption, monitoring, vulnerability management and cloud architecture.
- Experience identifying, prioritizing, and remediating operational risks in production cloud environments.
- Experience using scripting, APIs, or automation tools such as Python, PowerShell, or Bash to improve technical operations.
- Familiarity with security frameworks and best practices such as NIST, CIS Benchmarks, and ISO 27001.
- Strong troubleshooting, analytical, and communication skills, with the ability to collaborate effectively across technical teams.
Preferred Qualifications
Experience in any of the following areas would be valuable, but is not required:
- Experience with Amazon Bedrock, Azure Open AI/Azure AI or Google Vertex AI.
- Experience with CSPM/CNAPP platforms such as Wiz, Prisma Cloud, Orca, or Microsoft Defender for Cloud.
- Experience with cloud identity entitlement management (CIEM), data security posture management (DSPM), Zero Trust, or continuous compliance.
- Experience securing Kubernetes, containers, serverless applications, or cloud-native workloads.
- Exposure to Generative AI Security, AI/ML platforms or emerging AI security frameworks such as NIST AI RMF and OWASP guidance.
- Experience in media, entertainment, digital production or intellectual property protection.
The anticipated base salary for this position is $140,000-$180,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.
Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.
SPE will consider qualified applicants with arrest or conviction records in accordance with applicable law.
Sony Pictures does not allow audio recording, video recording or use of AI note-taking tools during interviews. Please be aware these tools may be enabled as a default and can be difficult to disable once the interview has started, so we recommend you check your device and disable these tools prior to the start of your interview. If recording or the use of the tools occurs during the interview and cannot be promptly turned off or disabled, the interviewer may end the interview.
To request an accommodation for purposes of participating in the hiring process, you may contact us at SPE_Accommodation_Assistance@spe.sony.com.