Sony Pictures Entertainment
The complete job description, requirements, and application details are available on the original posting.
View Full Job Details on LinkedInSony Pictures Entertainment (SPE) is a global entertainment company and a subsidiary of Sony Group Corporation, based in Tokyo. It specializes in motion picture and television production, acquisition, distribution, and digital content creation. SPE operates in over 130 countries and manages a film library of more than 3,500 titles, including 12 Academy Award winners. The Motion Picture Group at SPE includes notable production labels such as Columbia Pictures, Screen Gems, and Sony Pictures Animation. It produces major franchises like Spider-Man, Jumanji, and James Bond. Sony Pictures Television leads in content provision across various genres and platforms, managing a vast library of films and shows. SPE also operates state-of-the-art studio facilities and engages in corporate initiatives to support the arts. In 2024, the company acquired Alamo Drafthouse Cinema, enhancing its theatrical exhibition capabilities.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Sony Pictures Entertainment's AppSec philosophy emphasizes embedding application security principles throughout all phases of technology development and deployment, promoting secure coding practices aligned with company goals, and a focus on DevSecOps.”
Security Team
The AppSec team at Sony Pictures Entertainment works closely with IT infrastructure, application development, DevSecOps, and business stakeholders. Their responsibilities include providing visibility and actionable insight into production information security risk and ensuring consistent implementation of approved security tools, policies, and workflows. Virginia Lyons is identified as the Senior VP & Chief Information Security Officer. Information regarding the exact AppSec team org chart or reporting line is not publicly available.
Key Initiatives
Sony Pictures Entertainment's AppSec initiatives include utilizing static/dynamic application security testing (SAST/DAST), designing and implementing robust security controls for their AWS Data Lake environment, and developing security automation playbooks using Cortex XSOAR. They also manage data ingestion pipelines, with Fluent Bit referenced, and use Splunk or other SIEM tools. The company is committed to providing a safe and secure work environment for its productions. Information on an explicit Security Champions program or specific vulnerability management SLAs/MTTR targets is not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Sony Pictures Entertainment's site