Lead, Cloud Security Operations Engineer

Sony Pictures Entertainment, Inc; Culver City (CA); On-site; USD 150,000 - 190,000; Full time

Job summary

Sony Pictures Entertainment, Inc. is seeking a Lead Cloud Security Operations Engineer to advance our CSPM capabilities and securely operate our multi-cloud environment (AWS, Azure, GCP).

You will drive security visibility, automation, and governance across cloud workloads, including AI-enabled deployments. You will collaborate with Cloud Operations, Infrastructure, and Applications teams to reduce risk, implement least-privilege access, and strengthen security controls while mentoring other

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, IT, or equivalent experience.
• 6+ years of experience in Cloud Engineering, Infrastructure, Cybersecurity, Security Operations, or a related technical field.
• 4+ years of hands-on experience in cloud security and operations.

Responsibilities

• Drive CSPM capabilities across AWS, Azure, and GCP.
• Identify, assess, and prioritize cloud security risks and misconfigurations.
• Partner with teams to drive remediation of security findings and verify resolution.
• Develop security dashboards and reporting to provide visibility into cloud security posture.
• Strengthen security across cloud platforms including IAM, network security, and encryption.
• Mentor engineers and contribute to cloud security engineering practices.

Skills

Cloud engineering

Infrastructure

Cybersecurity

Security operations

Education

Bachelor's degree

Tools

Cloud CSPM tools

Job description

About the Opportunity

Help shape the future of cloud and AI security at Sony Pictures Entertainment. At Sony Pictures Entertainment, technology plays a critical role in enabling creativity, innovation, and the global entertainment business. Protecting our cloud environments, digital assets, and emerging technologies is essential to that mission. We're looking for a Lead Cloud Security Operation Engineer who is passionate about solving complex security challenges, improving how technology operates, and helping build secure, scalable cloud environments. In this hands‑on role, you'll help strengthen security across our enterprise Cloud ecosystem, including AWS, Microsoft Azure, and Google Cloud. You’ll take a deep role in advancing our Cloud Security Posture Management (CSPM) capabilities, improving security visibility, automating controls, and partnering with technology and stakeholder teams to reduce risk. You'll also have the opportunity to help shape how we securely adopt emerging technologies, including Generative AI, large language models, and AI‑enabled applications. This is an opportunity to do more than maintain security controls. You'll help improve and evolve our cloud security capabilities, influence technical decisions, and make a meaningful impact on how we protect and enable the business.

WHAT YOU'LL DO:

• Drive Cloud Security Operations & Continuous Improvement Provide day-to-day engineering, operational support and continuous improvement of cloud security posture management (CSPM) capabilities across AWS, Azure, and GCP.
• Identify, assess, and prioritize Cloud Security risks, including misconfigurations, excessive permissions, exposed resources, vulnerabilities, and configuration drift.
• Partner with Cloud Operations, Infrastructure, and application teams to drive timely remediation of security findings and validate successful resolution.
• Develop security dashboards, metrics, and reporting to provide visibility into cloud security posture, emerging risks, and remediation progress.
• Improve cloud security operations through automation, repeatable processes, and risk-based prioritization.
• Provide advanced technical troubleshooting and escalation support for complex cloud security issues.
• Strengthen Security Across Our Cloud Platforms Implement and maintain security controls across AWS, Azure, and GCP, including identity and access Management, network security, encryption, logging, and workload protection.
• Apply consistent security standards across cloud environments while accounting for platform-specific requirements.
• Leverage cloud-native security tools and CSPM/CNAPP platforms to improve security monitoring, configuration management, and continuous compliance.
• Strengthen identity security through least-privilege access, privileged access management, workload identities, secrets, management, and Zero Trust principles.
• Help secure modern cloud workloads, including containers, Kubernetes, and serverless technologies.
• Identify opportunities to improve security architecture, reduce risk, and strengthen operational resilience.
• Improve Security Visibility, Monitoring and Automation Enhance security monitoring across cloud infrastructure, applications, identities, workloads, and data.
• Integrate cloud security findings, audit logs, and telemetry into enterprise security monitoring and analytics platforms.
• Develop and improve dashboards, alerts, and reporting that help teams proactively identify and address security operations risks.
• Strengthen logging coverage, monitoring effectiveness, and visibility into unauthorized configuration changes, abnormal activity, and policy violations.
• Build and enhance automation using scripting, APIs, and cloud-native tools to streamline security assessments, remediation, reporting, and operational workflows.
• Help Shape the Future of AI Security Partner with security, cloud, and application teams to establish practical security controls for emerging AI technologies, including Generative AI, large language models, AI agents, and AI‑enabled applications.
• Help assess and address AI‑related risks, including sensitive‑data exposure, prompt injection, excessive permissions, insecure integrations, and unauthorized access.
• Contribute to security guardrails for AI workloads, including identity, access controls, data protection, logging, and appropriate human oversight.
• Support the secure adoption of enterprise AI platforms such as Amazon Bedrock, Azure AI, and Google Vertex AI.
• Apply emerging AI security practices and industry guidance to help protect AI‑enabled environments.
• Explore opportunities to responsibly leverage AI and automation to improve security analytics, operational efficiency, and risk management.
• Collaborate, Influence & Lead Serve as a trusted technical partner to Cloud Operations, Infrastructure, Architecture, Application teams and Governance, Risk & Compliance teams.
• Provide practical security guidance for cloud architecture that balances risk management with business needs, scalability, reliability, and innovation.
• Translate complex technical risks into clear recommendations and actionable solutions.
• Contribute to cloud security standards, operating procedures, architecture documentation, and continuous improvement initiatives.
• Mentor fellow engineers, share technical knowledge, and help strengthen cloud security operations engineering practices across the organization.

WHAT YOU BRING:

We're looking for someone with strong cloud security fundamentals, hands‑on engineering experience, and a passion for solving problems. You don't need to have worked with every technology in our environment to make an impact.

Required Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, IT, or equivalent experience.
• 6 + years of experience in Cloud Engineering, Infrastructure, Cybersecurity, Security Operations, or a related technical field.
• 4 + years of hands‑on