Staff Security Engineer - Security Arch & Eng

Staff Security Engineer - Security Arch & Eng Apply Later Job ID 10069566 Location Glendale, California, United States / New York, New York, United States / Seattle, Washington, United States / Orlando, Florida, United States Business The Walt Disney Company (Corporate) Date posted Dec.
12, 2023 Job Summary: At Disney, we’re storytellers.
We make the impossible, possible.
The Walt Disney Company is a world-class entertainment and technological leader.
Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses.
Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.
The Global Information Security (GIS) group provides services to protect the value and use of Disney’s information through collaboration, standardization, enforcement, and education across The Walt Disney Company.
The main focus areas of this group are: Reduce the risk of both accidental and malicious data disclosure Identify, monitor, engage with complete inventory of information Establish appropriate policies and procedures to be followed Educate user community to minimize risk This role will deliver security assurance and best practices oversight for the Disney Entertainment portfolio of products, platforms and services ecosystems, across complex multi-cloud, multi-partner environments.
It entails deep-level architecture reviews, crafting advisory and design reference architectures and secure design patterns, and roadmap strategy for architecture processes & tools.
What You Will Do: Develop reference architectures that can be used to solve common requirements or mitigate trends in security findings in a repeatable way following (and identifying) recommended best practices Lead threat modeling and partner with technical delivery teams to integrate security requirements and practices into solutions Drive security architecture reviews of platforms & applications in complex multi-tenant, multi-provider and vendor-cloud environments Lead community of practices and provide consultative services and guidance for tech builders during technical design of solutions Become an inspiring leader by educating and sharing best practices, building deep relationships with technical leaders, running product security reviews, etc.
Partner with the tech builder and delivery teams to follow progress on strategic platform initiatives and proactively handle oversight and pace for the architecture reviews and promptly address any critical issues that may create risk for The Walt Disney Company Develop and maintain technical proficiency and related certifications for core products and solution areas Research and investigate new effective ways of delivering security architecture as code, building automation into the existing Security Architecture Review process workflow and other service delivery optimizations Assist in the planning, develop, implement and update company’s information security strategy What You Will Bring: Minimum of 7+ years experience working in an Information / Cyber Security related field Expert knowledge of public cloud services (AWS, Azure, GCP, etc.
) and serverless and containerized environments Strong understanding of encryption, authN/authZ, API security, secrets best practices Knowledge of IaC (Infrastructure as Code) and supporting technologies (Cloud Formation, Terraform, etc.
) Demonstrated knowledge of general security threats, attack vectors, and vulnerabilities.
Ability to act as SME on threat modeling Scripting experience (Python, Perl, PowerShell, Yara, NodeJS) Familiarity with wide range of architecture tools, patterns, serverless ecosystems, pipeline security Effective interpersonal skills across all organization and technological levels Demonstrated ability to work in a challenging, dynamic, and fast-paced environment with limited supervision.
Candidate should be able to succeed in both independent and collaborative work scenarios Able to use critical thinking and logical thinking to prioritize work that drives the most impact to overall security posture Ability to analyze problems related to security architecture tools and provide improvements for enhancing development processes Education: Bachelor’s Degree in Computer Science, Computer Engineering, Information Security, or comparable field of study, and/or equivalent work experience Preferred Qualifications: Master's Degree in Computer Science, Computer Engineering, Information Systems or Information Security preferred Security+, CISSP, or other general information security certifications #DISNEYTECH The hiring range for this position in Glendale, CA is $138,038 to $182,490 per year and in New York, NY & Seattle, WA is $142,516 to $191,180 per year.
The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors.
A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.