Lead, Cloud Security Operations Engineer

About the Opportunity Help shape the future of cloud and AI security at Sony Pictures Entertainment.

At Sony Pictures Entertainment, technology plays a critical role in enabling creativity, innovation, and the global entertainment business. Protecting our cloud environments, digital assets, and emerging technologies is essential to that mission.

We're looking for a Lead Cloud Security Operation Engineer who is passionate about solving complex security challenges, improving how technology operates, and helping build secure, scalable cloud  this hands-on role, you'll help strengthen security across our enterprise Cloud ecosystem, including AWS, Microsoft Azure, and Google Cloud. You’ll take a deep role in advancing our Cloud Security Posture Management (CSPM) capabilities, improving security visibility, automating controls, and partnering with technology and stakeholder teams to reduce risk.

You'll also have the opportunity to help shape how we securely adopt emerging technologies, including Generative AI, large language models, and AI-enabled applications.

This is an opportunity to do more than maintain security controls. You'll help improve and evolve our cloud security capabilities, influence technical decisions, and make a meaningful impact on how we protect and enable the business.

WHAT YOU'LL DO:
Drive Cloud Security Operations & Continuous Improvement Provide day-to-day engineering, operational support and continuous improvement of cloud security posture management (CSPM) capabilities across AWS, Azure, and GCP.Identify, assess, and prioritize Cloud Security risks, including misconfigurations, excessive permissions, exposed resources, vulnerabilities, and configuration drift.

Partner with Cloud Operations, Infrastructure, and application teams to drive timely remediation of security findings and validate successful resolution.

Develop security dashboards, metrics, and reporting to provide visibility into cloud security posture, emerging risks, and remediation progress.

Improve cloud security operations through automation, repeatable processes, and risk-based prioritization.

Provide advanced technical troubleshooting and escalation support for complex cloud security issues.

Strengthen Security Across Our Cloud Platforms Implement and maintain security controls across AWS, Azure, and GCP, including identity and access Management, network security, encryption, logging, and workload protection.

Apply consistent security standards across cloud environments while accounting for platform-specific requirements.

Leverage cloud-native security tools and CSPM/CNAPP platforms to improve security monitoring, configuration management, and continuous compliance.

Strengthen identity security through least-privilege access, privileged access management, workload identities, secrets, management, and Zero Trust principles.

Help secure modern cloud workloads, including containers, Kubernetes, and serverless technologies.

Identify opportunities to improve security architecture, reduce risk, and strengthen operational resilience.

Improve Security Visibility, Monitoring and Automation Enhance security monitoring across cloud infrastructure, applications, identities, workloads, and data.

Integrate cloud security findings, audit logs, and telemetry into enterprise security monitoring and analytics platforms.

Develop and improve dashboards, alerts, and reporting that help teams proactively identify and address security operations risks.

Strengthen logging coverage, monitoring effectiveness, and visibility into unauthorized configuration changes, abnormal activity, and policy violations.

Build and enhance automation using scripting, APIs, and cloud-native tools to streamline security assessments, remediation, reporting, and operational workflows.

Help Shape the Future of AI Security Partner with security, cloud, and application teams to establish practical security controls for emerging AI technologies, including Generative AI, large language models, AI agents, and AI-enabled applications.

Help assess and address AI-related risks, including sensitive-data exposure, prompt injection, excessive permissions, insecure integrations, and unauthorized access.

Contribute to security guardrails for AI workloads, including identity, access controls, data protection, logging, and appropriate human oversight.

Support the secure adoption of enterprise AI platforms such as Amazon Bedrock, Azure AI, and Google Vertex AI.Apply emerging AI security practices and industry…