Lead, Cloud Security Operations Engineer

Sony Pictures Entertainment•Culver City, CA

About The Position

Sony Pictures Entertainment is seeking a hands-on Lead Cloud Security Operations Engineer to strengthen security across its enterprise cloud ecosystem, including AWS, Microsoft Azure, and Google Cloud. The role will advance cloud security posture management (CSPM), improve security visibility, automate controls, and partner with technology and stakeholder teams to reduce risk. It will also help shape secure adoption of emerging technologies, including generative AI, large language models, AI agents, and AI-enabled applications. The engineer will operate and improve cloud security capabilities, implement consistent platform-appropriate controls, enhance monitoring and automation, and help secure modern cloud workloads. The role includes technical troubleshooting and escalation, risk assessment and remediation, security reporting, and collaboration with cloud, infrastructure, application, architecture, and governance teams. The position also contributes to security standards and documentation, provides practical architecture guidance, and mentors fellow engineers.

Requirements

Bachelor's degree in Computer Science, Information Security, Engineering, IT, or equivalent experience.
At least 6 years of experience in Cloud Engineering, Infrastructure, Cybersecurity, Security Operations, or a related technical field.
At least 4 years of hands-on experience securing or operating enterprise cloud environments.
Strong cloud security engineering experience with AWS, Microsoft Azure, or Google Cloud, including familiarity with multi-cloud environments.
Hands-on experience with CSPM, CNAPP, or comparable cloud configuration security tools and practices.
Strong understanding of cloud security fundamentals, including identity and access management, network security, encryption, monitoring, vulnerability management, and cloud architecture.
Experience identifying, prioritizing, and remediating operational risks in production cloud environments.
Experience using scripting, APIs, or automation tools such as Python, PowerShell, or Bash to improve technical operations.
Familiarity with security frameworks and best practices such as NIST, CIS Benchmarks, and ISO 27001.
Strong troubleshooting, analytical, and communication skills, with the ability to collaborate effectively across technical teams.

Nice To Haves

Experience with Amazon Bedrock, Azure OpenAI/Azure AI, or Google Vertex AI.
Experience with CSPM/CNAPP platforms such as Wiz, Prisma Cloud, Orca, or Microsoft Defender for Cloud.
Experience with CIEM, DSPM, Zero Trust, or continuous compliance.
Experience securing Kubernetes, containers, serverless applications, or cloud-native workloads.
Exposure to generative AI security, AI/ML platforms, or emerging AI security frameworks such as NIST AI RMF and OWASP guidance.
Experience in media, entertainment, digital production, or intellectual property protection.

Responsibilities

Provide day-to-day engineering, operational support, and continuous improvement of CSPM capabilities across AWS, Azure, and GCP.
Identify, assess, and prioritize cloud security risks, including misconfigurations, excessive permissions, exposed resources, vulnerabilities, and configuration drift.
Partner with Cloud Operations, Infrastructure, and application teams to remediate security findings and validate resolution.
Develop security dashboards, metrics, and reporting on cloud posture, emerging risks, and remediation progress.
Improve cloud security operations using automation, repeatable processes, and risk-based prioritization.
Provide advanced troubleshooting and escalation support for complex cloud security issues.
Implement and maintain cloud security controls for identity and access management, network security, encryption, logging, and workload protection.
Apply consistent security standards across cloud environments while accounting for platform-specific requirements.
Use cloud-native security tools and CSPM/CNAPP platforms to improve monitoring, configuration management, and continuous compliance.
Strengthen identity security through least-privilege access, privileged access management, workload identities, secrets management, and Zero Trust principles.
Help secure containers, Kubernetes, serverless technologies, and other modern cloud workloads.
Identify opportunities to improve security architecture, reduce risk, and strengthen operational resilience.
Enhance monitoring across cloud infrastructure, applications, identities, workloads, and data.
Integrate cloud security findings, audit logs, and telemetry into enterprise security monitoring and analytics platforms.
Improve dashboards, alerts, reporting, logging coverage, and visibility into unauthorized changes, abnormal activity, and policy violations.
Build and enhance automation using scripting, APIs, and cloud-native tools for security assessments, remediation, reporting, and operational workflows.
Partner with security, cloud, and application teams to establish practical controls for generative AI, large language models, AI agents, and AI-enabled applications.
Help assess and address AI risks, including sensitive-data exposure, prompt injection, excessive permissions, insecure integrations, and unauthorized access.
Contribute guardrails for AI workloads, including identity, access controls, data protection, logging, and appropriate human oversight.
Support secure adoption of Amazon Bedrock, Azure AI, and Google Vertex AI.
Apply emerging AI security practices and industry guidance to protect AI-enabled environments.
Explore responsible uses of AI and automation to improve security analytics, operational efficiency, and risk management.
Serve as a trusted technical partner to Cloud Operations, Infrastructure, Architecture, Application, and Governance, Risk & Compliance teams.
Provide practical cloud architecture security guidance that balances risk with business needs, scalability, reliability, and innovation.
Translate technical risks into clear recommendations and actionable solutions.
Contribute to cloud security standards, operating procedures, architecture documentation, and continuous improvement initiatives.
Mentor fellow engineers, share technical knowledge, and strengthen cloud security operations engineering practices.