Sr. Cloud Security Engineer

Company: Sony Pictures Entertainment, Inc
Location: Culver City
Posted on: March 20, 2023

Job Description:

The Senior Cloud Security Engineer will be a core DevSecOps member of a technical team that is responsible for and not limited to securing, building, designing, and supporting cloud infrastructure and platform for enterprise cloud services. The incumbent will provide direct analysis and recommendations associated with cloud service provider security and application security implementation. The Senior Cloud Security Engineer will innovative ideas, develop proof-of-concepts and rapid prototypes alongside other engineers to create a secure best practice application design pattern/pipeline for infrastructure/application automation, monitoring and alerting operations. The engineer will automate security controls, integration security tools and process data to provide metrics and operational support.Responsibilities include developing, solutioning, operating, maintaining and support of a secure cloud environment: servers, storage, network services, enterprise applications, web application stack and cloud platform support and automation.Cloud Security Development:

• Responsible for any technological duties associated withIAM and cloud resources security, including development, design, planning, maintenance, and support.
• Work with the multi-disciplinary teams to improve, enhance or refactor continuous integration and deployments (CI/CD) security framework of tooling and application pipelines.
• Build and maintain security tools library for deployment, monitoring, management, and operations.
• Build and maintain integration with data platforms.
• Continuous proof-of-concepts development and rapid prototypes/refactor alongside other multi-disciplinary teams.
• Develop security standards in partnership with Engineering, Infrastructure Services, and Application Development.Cloud Security Support:
  • Day to day operations for service request fulfillment base on SLA/SLO.
  • Implement and maintain cloud security solutions including initial and ongoing configuration of related automation, notifications, and reporting capabilities.
  • Support in the security engineering requirements of enterprise applications.
  • Security gap analysis and assessment to issue identification and resolution pertaining to and not limited to security incident response.
  • Stay abreast with security standards and emerging vulnerabilities/threats to proactively resolve/remediate/mitigate.Provide oral and written status reports to IT management and customer support:
    • Create technical cloud security solutions and architectural design documents.
    • Create SOP/runbooks for operational processes and solutions.
    • Interpret global security and technical requirements into business requirements and communicate security risks to stakeholders.Specialty - Knowledge, Skills and Abilities Required Knowledge of:
      • Expertise in cloud service provider platforms and all related products and services (Amazon Web Services, Azure, GCP)
      • Expertise in Cloud Security Posture Management (CSPM), Cloud Workload Management (CWM), Cloud Network Security and Cloud Identify Security (in particular Palo Alto Prisma Cloud product suite)
      • Expertise in data platforms (Splunk, SumoLogic, DataDog)
      • Deploying and use of IaC tools (Terraform, CloudFormation)
      • Software Release management (CI/CD) with SAST / DAST / PaC
      • Deploying and administering of Linux servers, Windows servers, containers and serverless
      • Developing and executing CIS benchmark security controls
      • Experience in large heterogeneous server and network infrastructure
      • Enterprise processes and procedures.Skill In:
        • Strong interpersonal skills are required. Ability to work effectively with team members, clients and other areas of the IT environment
        • Strong written and oral communications
        • Excellent problem solving abilities, strong decision making skills and make sound judgment decisions.Ability To:
          • Work effectively with team members, clients, and other areas of IT
          • Take initiatives and carry out projects/tasks to completion
          • Handle multiple tasks and be flexible in a fast-paced environment
          • Deliver on timeEducation & Training Requirements:
            • Bachelor's degree requiredCompetencies:
              • Minimum 5 years experience with Information Security / Cybersecurity
              • Minimum 3 years experience with Cloud platforms, services, and modern application design
              • Minimum 5 years experience with Linux operating system administration
              • Minimum 5 years experience with Windows operating system administration
              • Minimum 3 years experience with virtualization and containers.
              • Minimum 3 years experience with programming languages (Python, Golang, etc.)
              • Minimum 5 years experience in enterprise environments
              • Bachelor degree or equivalent experience preferredThe anticipated base salary for this position is $120,000 to $155,000. This role may also qualify for annual incentive and/or comprehensive benefits. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.*Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics. *As part of our commitment to health and safety, all U.S. non-union and O.P.E.I.U. Local 174 applicants and employees must submit proof of vaccination against COVID-19 or request and obtain approval of a reasonable accommodation based on disability or a sincerely held religious belief, practice or observance. To request an accommodation for purposes of participating in the hiring process, you may contact us at SPE_Accommodation_Assistance@spe.sony.com.

Keywords: Sony Pictures Entertainment, Inc, Los Angeles , Sr. Cloud Security Engineer, Engineering , Culver City, California