Senior Cyber Incident Response Lead

Sony Pictures Entertainment, Inc; Culver City (CA); On-site; USD 142,000 - 178,000; Full time

Benefits offered by this job

Annual incentive

Comprehensive benefits

Job summary

Sony Pictures Entertainment is seeking an experienced Lead Cyber Incident Response professional to lead complex investigations across SPE's corporate, cloud, identity, and production environments. You will serve as a senior technical resource within the Incident Response team and collaborate with Legal, Privacy, and business stakeholders.

Responsibilities include incident commander duties, playbook development, mentoring analysts, and driving improvements in detection, containment, and recovery.

Qualifications

• 8+ years of cybersecurity experience with focus on incident response, forensics, threat hunting, or security operations.
• Proven experience leading enterprise-scale investigations and incident response efforts.
• Strong knowledge of modern attack techniques, threat actor behavior, and investigative methodologies.

Responsibilities

• Lead complex cybersecurity investigations from detection through containment, eradication, and recovery.
• Serve as incident commander, coordinating technical responders and business stakeholders.
• Investigate ransomware, phishing, insider threats, data exposure, and cloud security incidents.
• Develop and improve incident response playbooks and runbooks.
• Mentor analysts and provide executive-ready updates and risk-informed recommendations.

Skills

Incident response

Digital forensics

Threat hunting

Security operations

Executive communication

Stakeholder management

Education

CISSP

GCIH

GCFA

GCIA

GNFA

Tools

SIEM

SOAR

EDR/XDR

Cloud security

Azure

AWS

Microsoft 365

Python

PowerShell

Job description

Sony Pictures Entertainment is seeking an experienced Lead Cyber Incident Response professional to lead complex investigations across SPE's corporate, cloud, identity, and production environments. You will serve as a senior technical resource within the Incident Response team and collaborate with Legal, Privacy, and business stakeholders.

Responsibilities include incident commander duties, playbook development, mentoring analysts, and driving improvements in detection, containment, and recovery.