Analyst, Information Security

Please note that this role is based in the United Kingdom. To enable us to meet the statutory and regulatory obligations of the United Kingdom immigration system, you must have the appropriate immigration permission needed to work and reside in the United Kingdom for the duration of the employment.

The Incident Response & Information Security Analyst supports Sony Pictures Entertainment’s cyber defense mission by assisting with alert triage, incident response, documentation, and security operations activities across the enterprise.

This entry-level role is designed for a developing cybersecurity professional who can learn quickly, follow established playbooks, and contribute to timely, accurate responses to phishing, malware, identity, endpoint, cloud, and other security events. The analyst will work closely with Incident Response, Security Operations, IT, and other Information Security teams to help protect SPE’s employees, productions, intellectual property, business operations, and technology environment.

What you'll do:

• Monitor, review, and triage security alerts from SIEM, EDR, email security, identity, cloud, and other security platforms under the direction of senior analysts.
• Support investigation of suspected security events, including phishing, malware, credential exposure, suspicious logins, endpoint activity, and unauthorized access attempts.
• Collect and document relevant evidence, timelines, indicators of compromise, investigative steps, actions taken, and escalation details in the appropriate case management systems.
• Execute defined containment and remediation steps from approved playbooks, escalating complex or high-risk issues to senior Incident Response team members.
• Assist with post-incident review activities by capturing lessons learned, control gaps, recurring patterns, and opportunities to improve response quality.
• Support maintenance and continuous improvement of incident response playbooks, procedures, knowledge articles, and analyst runbooks.
• Research emerging threats, phishing themes, malware trends, vulnerabilities, and actor behaviors relevant to SPE’s business and technology environment.
• Partner with Information Security, IT, and business teams to support timely communication, ticket routing, evidence gathering, and remediation follow-up.
• Contribute to operational reporting, metrics, and recurring summaries related to alert volume, incident trends, response activity, and control improvement opportunities.

What you have:

• Foundational technical knowledge: Basic understanding of networking, operating systems, identity and access management, endpoint security, cloud services, email security, and common cybersecurity threats.

• Security operations exposure: Familiarity with SIEM, EDR, ticketing/case management, email security, vulnerability management, or log analysis tools preferred.

• Incident response discipline: Ability to follow playbooks, document investigative steps, preserve relevant evidence, escalate appropriately, and communicate findings clearly.

• Analytical skills: Strong curiosity, attention to detail, problem-solving ability, and willingness to validate assumptions before escalating or closing security events.

• Communication: Clear written and verbal communication skills, including the ability to summarize technical findings for analysts, managers, and business partners.

• Collaboration: Ability to work effectively with Incident Response, Security Operations, IT, and business stakeholders in a fast-paced environment.

• Learning mindset: Demonstrated interest in cybersecurity through coursework, labs, internships, certifications, personal projects, competitions, or related technical experience.

How we take care of you:

• Competitive salary.
• A choice of comprehensive health plan options that fit your lifestyle, including private medical insurance.
• Rest and recharge during a week off during the winter holidays, in addition to the 25 days of paid annual leave.
• Participate in extensive learning & development opportunities at all levels, including curated instructor-led classes and high-impact online resources.
• Build your community by joining our Employee Business Resource Groups and/or Sony Pictures Action – our racial equity and inclusion strategy.
• Access to an employee online store filled with a variety of discounted Sony products.
• Watch the newest movies and TV shows at our exclusive employee screenings at work.
• Entitlement to apply for an interest-free season ticket loan.
• Automatic enrolment in the Company’s Pension Plan
• Free counselling and advisory service.
• You will be automatically enrolled in the Company’s Life Insurance and Group Income Protection Plans, subject to any applicable service requirements.
• The opportunity to attend various social events in our state-of-the-art offices in Paddington.

In addition to the above, we have a range of other optional discounted benefits that are reviewed regularly (e.g., gym memberships, travel insurance, activity passes, car leasing, experience days and many more!)

If you require any reasonable adjustments with any part of the recruitment process, including the application or interview process, please contact us at [email protected]. Please put Reasonable Adjustment Request in the subject line of the email.

Sony Pictures does not allow audio recording, video recording or use of AI note-taking tools during interviews. Candidates requiring these tools as an accommodation during an interview should submit a reasonable adjustment request at the point they are invited to interview.

Sony Pictures Entertainment is committed to equal opportunity in all its employment practices, policies and procedures. No worker or potential worker will therefore receive less favourable treatment due to their race, age, creed, sexual orientation, colour, nationality, ethnic origin, disability, religion, gender, marital status or Trade Union membership (if applicable).

#LI-TD1