Analyst, Information Security

Please note that this role is based in the United Kingdom. To enable us to meet the statutory and regulatory obligations of the United Kingdom immigration system, you must have the appropriate immigration permission needed to work and reside in the United Kingdom for the duration of the employment. The Incident Response & Information Security Analyst supports Sony Pictures Entertainment’s cyber defense mission by assisting with alert triage, incident response, documentation, and security operations activities across the enterprise. This entry-level role is designed for a developing cybersecurity professional who can learn quickly, follow established playbooks, and contribute to timely, accurate responses to phishing, malware, identity, endpoint, cloud, and other security events. The analyst will work closely with Incident Response, Security Operations, IT, and other Information Security teams to help protect SPE’s employees, productions, intellectual property, business operations, and technology environment. What you'll do: Monitor, review, and triage security alerts from SIEM, EDR, email security, identity, cloud, and other security platforms under the direction of senior analysts. Support investigation of suspected security events, including phishing, malware, credential exposure, suspicious logins, endpoint activity, and unauthorized access attempts. Collect and document relevant evidence, timelines, indicators of compromise, investigative steps, actions taken, and escalation details in the appropriate case management systems. Execute defined containment and remediation steps from approved playbooks, escalating complex or high-risk issues to senior Incident Response team members. Assist with post-incident review activities by capturing lessons learned, control gaps, recurring patterns, and opportunities to improve response quality. Support maintenance and continuous improvement of incident response playbooks, procedures, knowledge articles, and analyst runbooks. Research emerging threats, phishing themes, malware trends, vulnerabilities, and actor behaviors relevant to SPE’s business and technology environment. Partner with Information Security, IT, and business teams to support timely communication, ticket routing, evidence gathering, and remediation follow-up. Contribute to operational reporting, metrics, and recurring summaries related to alert volume, incident trends, response activity, and control improvement opportunities. What you have : Foundational technical knowledge: Basic understanding of networking, operating systems, identity and access management, endpoint security, cloud services, email security, and common cybersecurity threats. Security operations exposure: Familiarity with SIEM, EDR, ticketing/case management, email security, vulnerability management, or log analysis tools preferred. Incident response discipline: Ability to follow playbooks, document investigative steps, preserve relevant evidence, escalate…