Content Security & Compliance Engineer

Sony Pictures Imageworks • Vancouver, BC

17d • CA$104,200 - CA$135,500

About The Position

Sony Pictures Imageworks is seeking a motivated and technically skilled Content Security & Compliance Engineer to join their Content Protection & Compliance team. This role will contribute to security controls, compliance requirements, and engineering practices to protect intellectual property while enabling efficient production workflows. The engineer will collaborate with Engineering, Security Operations, Production, Infrastructure, and Audit teams to assess risk, validate security configurations, operate compliance monitoring tools, and integrate security into technology solutions and production processes. This position combines hands-on technical work with security analysis, compliance, and collaboration across multiple technology disciplines.

Requirements

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent professional experience.
• Approximately 5-8 years of experience in cybersecurity, security engineering, compliance, infrastructure security, or a related technical discipline.
• Strong experience implementing and validating secure system configurations using industry security baselines and benchmarks.
• Experience operating security compliance, vulnerability management, SIEM, or configuration assessment tools.
• Strong working knowledge of cloud security principles and common cloud security controls.
• Understanding of industry security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, SOC 2, or similar.
• Understanding of secure network architecture, network segmentation, Zero Trust principles, and hybrid cloud environments.
• Experience providing technical security guidance to engineering or infrastructure teams.
• Strong skills in scripting and automation using Python, PowerShell, Bash, or similar languages.
• Experience working with Infrastructure as Code (IaC) technologies, including Terraform, to support secure infrastructure deployments.
• Strong analytical, troubleshooting, communication, and documentation skills.

Nice To Haves

• Experience supporting Media & Entertainment, gaming, broadcasting, streaming, or digital content production environments.
• Experience with content protection, digital asset security, media workflows, and production technologies.
• Familiarity with DLP, SIEM, endpoint security, identity and access management (IAM), and cloud security.
• Experience supporting security audits and compliance assessments.
• Working knowledge of cloud platforms, including AWS, Azure, and Google Cloud.
• Detail-oriented, with the ability to perform repetitive tasks accurately and efficiently.
• Proactive with a strong focus on continuous improvement.
• Excellent written and verbal technical English, with strong documentation skills.
• Results-driven, with a consistent track record of meeting deadlines.
• Leads by establishing project management standards and driving organizational accountability.
• Thrives in fast-paced, production-focused environments, collaborating effectively across distributed software, infrastructure, and content delivery teams.

Responsibilities

• Initiates business and technical gap assessments to identify security, compliance, and operational risks.
• Leads risk assessments and track remediation efforts through completion.
• Develops and maintains security standards, procedures, technical documentation, and compliance artifacts.
• Assess, implement, configure, and operate security compliance monitoring, SIEM, and security validation tools.
• Maintain configuration compliance solutions, including OpenSCAP and similar technologies, to validate system configurations against security baselines.
• Evaluate cloud security services, validating security controls, and recommending secure configurations.
• Support the Security Operations team, assisting with operational security initiatives and incident response activities as needed.
• Participate/Lead internal and external audit activities by providing technical evidence, documentation, and remediation guidance.
• Collaborate closely with Engineering teams to review solution designs and advise on secure implementations.
• Partner with Production and business stakeholders to develop secure, scalable, and frictionless workflows that protect content without impeding creativity.
• Collaboratively evaluate new technologies and security solutions to determine their effectiveness in protecting enterprise and production environments.
• Support and guide security controls to align with industry standards and organizational policies.

Benefits

• healthcare
• tuition reimbursement
• RRSP's
• Sick and Vacation leave
• standard increases as applicable

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level