Security Engineer

Job Summary:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the Magic by protecting information systems and platforms.

• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.

• Strengthen the business through optimizing execution, application, and technology used to protect the Company.

• Innovate by investing in core capabilities to enhance operational efficiency.

The Security Architecture and Engineering team is looking for a Security Engineer that will be responsible for maintaining and optimizing our Enterprise Security platforms, ensuring resilience, performance, and integrity of our critical cybersecurity solutions.  We are seeking a candidate that is interested in learning new technologies, improve our workflows, and can collaborate with our segment partners to reduce risk across The Walt Disney Company.

Responsibilities:

• Design, develop, and implement monitoring jobs to ensure availability and optimal performance of the Security Architecture and Engineering cybersecurity solutions

• Perform routine maintenance tasks, including software updates and patches to ensure compliance with Information Security Policies and Standards

• Coordinate and respond to system alerts to ensure recovery and mitigation of potential disruptions related to Security Architecture and Engineering cybersecurity solutions

• Maintain runbooks and checklists for monitoring activities, issue identification, and resolutions for consistent delivery of our services

• Continuously monitor performance metrics to provide insights and targets for optimization

• Architect solutions by adhering to security best practices and to comply with security standards

• Optimize security tool deployments and introduce scalable processes across cybersecurity capabilities

• Contribute and collaborate with other Information Security team members across the broad spectrum of information security programs, such as Threat & Vulnerability Management, Security Response, Information Protection, Risk and Compliance

• Communicate vertically and horizontally to keep stakeholders informed

• May perform other duties and responsibilities necessary to support and protect the business

Basic Qualifications:

• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

• 3 years of work experience required

• Knowledge of scripting languages like Python, Bash, and PowerShell

• Knowledge of JavaScript/TypeScript, React framework

• Knowledge of OpenSearch, PostgreSQL, and other data storage platforms

• Ability to learn and continue to maintain cutting edge skills and knowledge on a variety of technical areas (Windows, Unix/Linux, AppSec, Vulnerability Management, etc.)

• Experience with deployment and maintenance software

• Good organization skills and attention to detail

• Demonstrated professional written, verbal, and presentation communications skills

• Highly flexible and adaptive; able to multi-thread across several simultaneous work efforts

• Sharp analytical and problem-solving skills

• Ability to solve complex problems and develop creative alternatives, as well as continuous process improvement skills

• Demonstrated ability to handle confidential information

• Proven ability to work effectively in a fast-paced environment as part of a high-performance team

Preferred Qualifications:

• Applied skills in Cloud Platforms (AWS/GCP/Azure)

• Familiarity with Infrastructure-as-Code tools including Terraform and/or CloudFormation

• Proficient in Typescript/Javascript - Front end development

• Proficient in Python/yaml/json - Backend development

Required Education

• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

The hiring range for this position in Glendale, California is $104,600 to $140,200 per year and in Seattle, Washington is $109,500 to $146,800 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.