Intern, Cloud & Security Operations - Spring 2027

Sony Pictures Entertainment; Culver City (CA); On-site; USD 25,000 - 36,000; Full time

Benefits offered by this job

Comprehensive benefits

Job summary

Sony Pictures Entertainment is seeking a security-focused Cloud Operations professional to manage CSPM capabilities, monitor cloud configurations, and support cross-team security engineering for AWS, Azure, and GCP. You will analyze networking in a multi-account setup and identify automation opportunities to streamline operations.

The role emphasizes governance, IAM, and API integrations, with a preference for candidates currently pursuing a Bachelor’s degree and familiar with CSPM tools and

Qualifications

• Experience with cloud governance and IAM controls.
• Familiarity with policy-based security configurations and SCPs.
• Understanding of multi-account networking and security segmentation.

Responsibilities

• Operate CSPM capabilities to monitor cloud misconfigurations and policy violations.
• Provide security engineering support for enterprise AWS, Azure, and GCP environments.
• Advise on networking issues in a multi-account, segmented environment.

Skills

Cloud IAM

Privileged access

SCPs

Resource-based policies

Education

Currently enrolled in a Bachelor’s degree

Tools

REST API

GraphQL API

Job description

The Cloud Datacenter Department manages infrastructure for both cloud and on prem. They are responsible for securing and configuring landing zone for application to host their infrastructure. Under Cloud Datacenter, Cloud Operations focuses on public Cloud infrastructure for SPE. We are responsible for security and compliance of all cloud infrastructure including provisioning, decommissioning, continuous monitoring for compliance, networking, providing reusable IAC module for application teams use to host their application.

Responsibilities:

• Operate Cloud Security Posture Management (CSPM) capabilities to provide continuous visibility into cloud misconfigurations, policy violations, configuration drift, exposed resources, excessive permissions, and other security risks
• Provide day-to-day security engineering and operational support for enterprise AWS, Azure, and GCP environments (Create IAM permission, Create VPC, Decom account)
• Analyze / Consult/ provide solution to application team on networking issues in a multi account , network segmented environment
• Identify opportunity to continuously automate the operational workflow and streamline operation
• Identify Cost Optimization opportunity in cloud spend and do charge back reporting

Qualifications:

• Cloud governance with specific emphasis on Cloud IAM and privileged access, SCPs, Resource based Polcicies
• Develop, Use REST/Graph QL Api to integrate distributed system
• Exposure to multi account structure, Network security and segmentation

Preferred Qualifications:

• Currently enrolled in a Bachelor’s degree
• Knowledge and exposure of CSPM tool and its API
• Knowledge of finops platform
• Good mastery over python or any other programming language
• Understanding of how Gen AI Agents are secured in specific CSP platform
• Exposure to any monitoring tool

The anticipated base salary for this position is $22/hour. This role may also qualify for comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.

Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.

SPE will consider qualified applicants with arrest or conviction records in accordance with applicable law.

Sony Pictures does not allow audio recording, video recording or use of AI note-taking tools during interviews. Please be aware these tools may be enabled as a default and can be difficult to disable once the interview has started, so we recommend you check your device and disable these tools prior to the start of your interview. If recording or the use of the tools occurs during the interview and cannot be promptly turned off or disabled, the interviewer may end the interview.

To request an accommodation for purposes of participating in the hiring process, you may contact us at [e-mail].