Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 2 days ago

Lead, Cloud Security Operations Engineer

spe61 open roles

Where
Culver City, California
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowLead, Cloud Security Operations Engineerspe · Culver City, California

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on spe's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

10.5% of postings close within 7 days. Measured by our own scanner across the market. spe postings stay open a median of 7 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.3%3 days
  3. 10.5%7 days
  4. 15.9%14 days
  5. 34.1%30 days
This job: posted 2 days ago

spe median: 7 days open

The posting

About the Opportunity

Help shape the future of cloud and AI security at Sony Pictures Entertainment.

At Sony Pictures Entertainment, technology plays a critical role in enabling creativity, innovation, and the global entertainment business. Protecting our cloud environments, digital assets, and emerging technologies is essential to that mission.

We're looking for a Lead Cloud Security Operation Engineer who is passionate about solving complex security challenges, improving how technology operates, and helping build secure, scalable cloud environments.

In this hands-on role, you'll help strengthen security across our enterprise Cloud ecosystem, including AWS, Microsoft Azure, and Google Cloud. You’ll take a deep role in advancing our Cloud Security Posture Management (CSPM) capabilities, improving security visibility, automating controls, and partnering with technology and stakeholder teams to reduce risk.

You'll also have the opportunity to help shape how we securely adopt emerging technologies, including Generative AI, large language models, and AI-enabled applications.

This is an opportunity to do more than maintain security controls. You'll help improve and evolve our cloud security capabilities, influence technical decisions, and make a meaningful impact on how we protect and enable the business.

  • WHAT YOU'LL DO: Drive Cloud Security Operations & Continuous ImprovementProvide day-to-day engineering, operational support and continuous improvement of cloud security posture management (CSPM) capabilities across AWS, Azure, and GCP. Identify, assess, and prioritize Cloud Security risks, including misconfigurations, excessive permissions, exposed resources, vulnerabilities, and configuration drift. Partner with Cloud Operations, Infrastructure, and application teams to drive timely remediation of security findings and validate successful resolution. Develop security dashboards, metrics, and reporting to provide visibility into cloud security posture, emerging risks, and remediation progress. Improve cloud security operations through automation, repeatable processes, and risk-based prioritization. Provide advanced technical troubleshooting and escalation support for complex cloud security issues.
  • Strengthen Security Across Our Cloud PlatformsImplement and maintain security controls across AWS, Azure, and GCP, including identity and access Management, network security, encryption, logging, and workload protection. Apply consistent security standards across cloud environments while accounting for platform-specific requirements. Leverage cloud-native security tools and CSPM/CNAPP platforms to improve security monitoring, configuration management, and continuous compliance. Strengthen identity security through least-privilege access, privileged access management, workload identities, secrets, management, and Zero Trust principles. Help secure modern cloud workloads, including containers, Kubernetes, and serverless technologies. Identify opportunities to improve security architecture, reduce risk, and strengthen operational resilience.
  • Improve Security Visibility, Monitoring and AutomationEnhance security monitoring across cloud infrastructure, applications, identities, workloads, and data. Integrate cloud security findings, audit logs, and telemetry into enterprise security monitoring and analytics platforms. Develop and improve dashboards, alerts, and reporting that help teams proactively identify and address security operations risks. Strengthen logging coverage, monitoring effectiveness, and visibility into unauthorized configuration changes, abnormal activity, and policy violations. Build and enhance automation using scripting, APIs, and cloud-native tools to streamline security assessments, remediation, reporting, and operational workflows.
  • Help Shape the Future of AI SecurityPartner with security, cloud, and application teams to establish practical security controls for emerging AI technologies, including Generative AI, large language models, AI agents, and AI-enabled applications. Help assess and address AI-related risks, including sensitive-data exposure, prompt injection, excessive permissions, insecure integrations, and unauthorized access. Contribute to security guardrails for AI workloads, including identity, access controls, data protection, logging, and appropriate human oversight. Support the secure adoption of enterprise AI platforms such as Amazon Bedrock, Azure AI, and Google Vertex AI. Apply emerging AI security practices and industry guidance to help protect AI-enabled environments. Explore opportunities to responsibly leverage AI and automation to improve security analytics, operational efficiency, and risk management.
  • Collaborate, Influence & LeadServe as a trusted technical partner to Cloud Operations, Infrastructure, Architecture, Application teams and Governance, Risk & Compliance teams. Provide practical security guidance for cloud architecture that balances risk management with business needs, scalability, reliability, and innovation. Translate complex technical risks into clear recommendations and actionable solutions. Contribute to cloud security standards, operating procedures, architecture documentation, and continuous improvement initiatives. Mentor fellow engineers, share technical knowledge, and help strengthen cloud security operations engineering practices across the organization.

WHAT YOU BRING:

We're looking for someone with strong cloud security fundamentals, hands-on engineering experience, and a passion for solving problems. You don't need to have worked with every technology in our environment to make an impact.

Required Qualifications

  • Bachelor's degree in Computer Science, Information Security, Engineering, IT, or equivalent experience.
  • 6 + years of experience in Cloud Engineering, Infrastructure, Cybersecurity, Security Operations, or a related technical field.
  • 4 + years of hands-on experience securing or operating enterprise cloud environments.
  • Strong cloud security engineering experience with AWS, Microsoft Azure, or Google Cloud, including familiarity with multi-cloud environments.
  • Hands-on experience with Cloud Security Posture Management (CSPM), Cloud-Native Application Protection Platforms (CNAPP), or comparable cloud configuration security tools and practices.
  • Strong understanding of cloud security fundamentals, including identity and access management, network security, encryption, monitoring, vulnerability management and cloud architecture.
  • Experience identifying, prioritizing, and remediating operational risks in production cloud environments.
  • Experience using scripting, APIs, or automation tools such as Python, PowerShell, or Bash to improve technical operations.
  • Familiarity with security frameworks and best practices such as NIST, CIS Benchmarks, and ISO 27001.
  • Strong troubleshooting, analytical, and communication skills, with the ability to collaborate effectively across technical teams.

Preferred Qualifications

Experience in any of the following areas would be valuable, but is not required:

  • Experience with Amazon Bedrock, Azure Open AI/Azure AI or Google Vertex AI.
  • Experience with CSPM/CNAPP platforms such as Wiz, Prisma Cloud, Orca, or Microsoft Defender for Cloud.
  • Experience with cloud identity entitlement management (CIEM), data security posture management (DSPM), Zero Trust, or continuous compliance.
  • Experience securing Kubernetes, containers, serverless applications, or cloud-native workloads.
  • Exposure to Generative AI Security, AI/ML platforms or emerging AI security frameworks such as NIST AI RMF and OWASP guidance.
  • Experience in media, entertainment, digital production or intellectual property protection.

The anticipated base salary for this position is $140,000-$180,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.

Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics.

SPE will consider qualified applicants with arrest or conviction records in accordance with applicable law.

Sony Pictures does not allow audio recording, video recording or use of AI note-taking tools during interviews. Please be aware these tools may be enabled as a default and can be difficult to disable once the interview has started, so we recommend you check your device and disable these tools prior to the start of your interview. If recording or the use of the tools occurs during the interview and cannot be promptly turned off or disabled, the interviewer may end the interview.

To request an accommodation for purposes of participating in the hiring process, you may contact us at [email protected].

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against spe's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on spe's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    spe's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.