Contract Cloud Security Operations Engineer

Sony Interactive Entertainment - San Diego, CA

Full-time

San Diego, CA

Motion Picture and Sound Recording Industries

About the position

We are seeking a dynamic and skilled Security Operations Engineer with expertise in Qualys and a strong DevOps background to join our dedicated Endpoint Security team. This role is essential in ensuring our security posture is robust, scalable, and integrated seamlessly with our office locations and platform. You will play a pivotal role in maintaining and improving the security of our IT infrastructure, working closely with various internal teams to implement the endpoint security software stack.

Responsibilities

• Integrate security tools and practices into containerized environments
• Develop and maintain infrastructure as code
• Design and maintain scripts for system automation
• Lead integration of Qualys components such as container security sensors, cloud connectors, and container registry scanning
• Deploy and configure Qualys tools to ensure comprehensive vulnerability management across the organization
• Maintain and update Qualys configurations to align with evolving security policies and compliance requirements
• Develop processes to monitor newly integrated systems and enable data collection, integration monitoring, and alerting
• Collaborate with IT and business SRE teams to integrate security technologies successfully
• Collaborate at all levels of the engineering process, including analysis, development, documentation, integration, and testing

Requirements

• Bachelor's degree in computer science, Information Technology, or related field
• 3+ years of experience in a security operations role with a focus on cloud security and large scale technology deployments
• Knowledge of cloud software packaging, distribution, and configuration
• Excellent knowledge of cloud technology and microservices such as Amazon Web Services, Google Cloud Platform, Azure, Kubernetes and its implementations within cloud providers (ECS, EKS, GKE, etc.)
• Experience with version control systems such as Git and platforms like GitHub and GitLab in a development environment
• Knowledge of orchestration tools such as Ansible, Puppet, Chef, or SaltStack
• Proficiency in scripting languages such as Python, Bash, PowerShell, or Ruby

Nice-to-haves

• Proficiency in deploying and managing Qualys vulnerability management solutions, including implementation of Cloud Connectors, Total Cloud and Container Security modules, Network Scanners
• Familiarity with Infrastructure as Code (IaC) principles and practices, including experience with CloudFormation, packer, terraform
• Solid understanding of network security, cloud security, and application security principles
• Familiarity with regulatory requirements and compliance standards (e.g., GDPR, SOX, PCI-DSS)

Benefits

• Medical insurance
• Dental insurance
• Vision insurance