Content Security & Compliance Engineer
Sony Pictures Imageworks1 month ago
Vancouver, CanadaSenior / Staff+
Responsibilities
- Initiate business and technical gap assessments to identify security, compliance, and operational risks.
- Lead risk assessments and track remediation efforts through completion.
- Develop and maintain security standards, procedures, technical documentation, and compliance artifacts.
- Assess, implement, configure, and operate security compliance monitoring, SIEM, and security-validation tools.
- Maintain configuration-compliance solutions, including OpenSCAP, to validate systems against security baselines.
- Evaluate cloud security services and recommend secure configurations.
- Support Security Operations initiatives and incident-response activities as needed.
- Participate in and lead internal and external audits by providing technical evidence, documentation, and remediation guidance.
- Review engineering solution designs and advise on secure implementations.
- Partner with Production and business stakeholders to create secure, scalable workflows that protect content without impeding production.
- Evaluate new technologies and security solutions for enterprise and production environments.
- Support alignment of security controls with industry standards and organizational policies.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent professional experience.
- Approximately 5–8 years of experience in cybersecurity, security engineering, compliance, infrastructure security, or a related technical discipline.
- Strong experience implementing and validating secure system configurations against industry security baselines and benchmarks.
- Experience operating security compliance, vulnerability-management, SIEM, or configuration-assessment tools.
- Strong knowledge of cloud security principles and common cloud security controls.
- Understanding of NIST, CIS Benchmarks, ISO 27001, SOC 2, or similar security frameworks and standards.
- Understanding of secure network architecture, network segmentation, Zero Trust principles, and hybrid cloud environments.
- Experience providing technical security guidance to engineering or infrastructure teams.
- Scripting and automation skills using Python, PowerShell, Bash, or similar languages.
- Experience with Infrastructure as Code technologies, including Terraform.
- Preferred experience with content protection, digital asset security, media workflows, and production technologies.
- Preferred familiarity with DLP, SIEM, endpoint security, IAM, and cloud security.
- Preferred experience supporting security audits and compliance assessments.
- Preferred working knowledge of AWS, Azure, and Google Cloud.
- Preferred certifications include CISSP, CCSP, AWS Certified Security – Specialty, SABSA, TPN Assessor, or equivalent industry-recognized cybersecurity certifications.
- Strong analytical, troubleshooting, communication, documentation, technical English, and organizational skills.
Benefits
- Healthcare, tuition reimbursement, RRSPs, sick leave, and vacation leave are provided per company policy.
- Standard increases are provided as applicable.
- The position is located in Vancouver, British Columbia, Canada.