Content Security & Compliance Engineer

Formal Education

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent professional experience.

Preferred Certifications

• CISSP – Certified Information Systems Security Professional
• CCSP – Certified Cloud Security Professional
• AWS Certified Security – Specialty
• SABSA
• Trusted Partner Network (TPN) Assessor
• Or equivalent industry-recognized cybersecurity certifications

• Experience with content protection, digital asset security, media workflows, and production technologies.
• Familiarity with DLP, SIEM, endpoint security, identity and access management (IAM), and cloud security.
• Experience supporting security audits and compliance assessments.
• Working knowledge of cloud platforms, including AWS, Azure, and Google Cloud.
• Detail-oriented, with the ability to perform repetitive tasks accurately and efficiently.
• Proactive with a strong focus on continuous improvement.
• Excellent written and verbal technical English, with strong documentation skills.
• Results-driven, with a consistent track record of meeting deadlines.
• Leads by establishing project management standards and driving organizational accountability.
• Thrives in fast-paced, production-focused environments, collaborating effectively across distributed software, infrastructure, and content delivery teams.

The anticipated base salary for this position is $104,200.00 - $135,500.00/annually. Benefits are per company policy: which include healthcare, tuition reimbursement, RRSP's, Sick and Vacation leave, standard increases as applicable. The actual base salary offered will depend on a variety of factors, including without limitation, the qualifications of the individual applicant for the position, years of relevant experience, level of education attained, certifications or other professional licenses held, and if applicable, the location of the position.

We value unique perspectives, and want diverse, unique talent to work with us. We encourage candidates from all identities to apply.

Sony Pictures Entertainment is an equal opportunity employer. We evaluate qualified applicants without regard to race, colour, religion, sex, national origin, disability, age, sexual orientation, gender identity, or other protected characteristics.

• → Initiates business and technical gap assessments to identify security, compliance, and operational risks.
• → Leads risk assessments and track remediation efforts through completion.
• → Develops and maintains security standards, procedures, technical documentation, and compliance artifacts.
• →Assess, implement, configure, and operate security compliance monitoring, SIEM, and security validation tools.
• →Maintain configuration compliance solutions, including OpenSCAP and similar technologies, to validate system configurations against security baselines.
• →Evaluate cloud security services, validating security controls, and recommending secure configurations. 
• →A key contributor to the Security Operations team, supporting operational security initiatives and incident response activities as needed.
• →Participate / Lead internal and external audit activities by providing technical evidence, documentation, and remediation guidance.
• →Collaborate closely with Engineering teams to review solution designs and advise on secure implementations.
• →Partner with Production and business stakeholders to develop secure, scalable, and frictionless workflows that protect content without impeding creativity.
• →Collaboratively evaluate new technologies and security solutions to determine their effectiveness in protecting enterprise and production environments.
• →Support and guide security controls align with industry standards and organizational policies.

• Approximately 5-8 years of experience in cybersecurity, security engineering, compliance, infrastructure security, or a related technical discipline, (preferably includes time supporting Media & Entertainment, gaming, broadcasting, streaming, or digital content production environments).
• Strong experience implementing and validating secure system configurations using industry security baselines and benchmarks.
• Experience operating security compliance, vulnerability management, SIEM, or configuration assessment tools.
• Strong working knowledge of cloud security principles and common cloud security controls.
• Understanding of industry security frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, SOC 2, or similar.
• Understanding of secure network architecture, network segmentation, Zero Trust principles, and hybrid cloud environments.
• Experience providing technical security guidance to engineering or infrastructure teams.
• Strong skills in scripting and automation using Python, PowerShell, Bash, or similar languages.
• Experience working with Infrastructure as Code (IaC) technologies, including Terraform, to support secure infrastructure deployments.
• Strong analytical, troubleshooting, communication, and documentation skills.