Trainee, Incident Response & Information Security

The Information Security department is responsible for safeguarding Sony Pictures Entertainment’s information, as well as data entrusted by business partners, contractors, and customers. We support the business through a combination of preventative and responsive controls that ensure a secure operating environment. 

Information Security encompasses not only digital assets across systems and networks, but also physical data, including written and printed materials. The organization includes multiple specialized teams, such as Risk Management, Threat Intelligence, Incident Response, Production & Content Security, and Privacy. 

Responsibilities 

• Actively support and participate in Incident Response activities, including triage, investigation, and resolution of security alerts across corporate and subsidiary environments 

• Leverage Splunk to investigate incidents, develop advanced queries, and improve visibility into user and system activity 

• Partner closely with Threat Intelligence to identify, assess, and operationalize emerging threats into actionable detections 

• Design, implement, and tune detection alerts and use cases to enhance monitoring and response capabilities 

• Collect, analyze, and document forensic artifacts during incident investigations 

• Contribute to security tooling and automation efforts, including enhancements to investigation workflows (e.g., Splunk-based solutions) 

• Support security awareness initiatives through data analysis and reporting (e.g., phishing metrics, user behavior insights) 

• Take ownership of defined projects aligned to FY27 priorities, delivering measurable improvements to detection and response effectiveness 

Qualifications 

• Hands-on experience or strong familiarity with SIEM platforms (preferably Splunk) and security operations workflows 

• Foundational understanding of incident response, threat detection, and investigation techniques 

• Ability to independently research, analyze, and apply new information in a practical setting 

• Strong analytical thinking with attention to detail in investigating complex activity chains 

• Effective written and verbal communication skills, including documentation of findings and recommendations 

• Ability to collaborate across cross-functional teams in a fast-paced environment 

Preferred Qualifications 

• Bachelor’s degree in Computer Science, Computer Information Systems, or a related field 

• Experience with log analysis, detection engineering, or threat hunting concepts 

• Knowledge of cloud environments, networks, and web technologies 

• Exposure to security automation or scripting is a plus 

• Demonstrated passion for cybersecurity and continuous learning