Security Engineer - Software Engineer

Department Description: 

At Disney, we're storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt's passion was to continuously envision new ways to move audiences around the world, a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences, and we're constantly looking for new ways to enhance these exciting experiences. 

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence. 

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to: 

• Secure the Magic by protecting information systems and platforms. 

• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests. 

• Strengthen the business through optimizing execution, application, and technology used to protect the Company. 

• Innovate by investing in core capabilities to enhance operational efficiency. 

Team Description: 

Our DevOps Platform Team builds and ships shared security infrastructure, governance tooling, and enterprise automation at scale, with a relentless focus on production quality and engineering craft. 

This team designs, develops and implements security automation tools and sites to help our customers focus on areas of risk. This role involves supporting technical projects, collaborating with team members, and contributing to security automation initiatives under the guidance of senior engineers. 

What You'll Do: 

The Security Engineer – Software Engineer will: 

• Work within the Security Development and Design team that is responsible for protecting the network and company assets from security threats or attacks through the development of security automation capabilities. 

• Support and help maintain code deployment pipelines using GitLab or similar CI/CD processes. 

• Assist in optimizing security tool deployments and help extend scalable processes across Cyber Security capabilities. 

• Collaborate effectively with cross-functional teams and contribute to Information Security team efforts across the broad spectrum of information security programs. 

• Help develop and maintain platforms needed to host applications with security requirements, under senior engineer direction. 

• Maintain and improve runbooks for application support and incident response procedures. 

• Support monitoring solutions for applications, including alerting capabilities. 

• Communicate effectively with stakeholders and contribute to technical discussions. 

• Contribute to security automation projects and team initiatives.

• Research new technologies and security tools to help evaluate their potential fit for team capabilities. 

Required Qualifications & Skills: 

• Minimum of 3+ years of experience with scripting languages like Python, Bash, and PowerShell with ability to build reliable automation.

• Working knowledge of OpenSearch, PostgreSQL, or other data storage platforms. 

• Working knowledge of Infrastructure as Code tools (CloudFormation, Terraform, Azure Resource Manager, Google Deployment Manager).

• Demonstrated ability to learn and grow skills across multiple technical areas (Unix/Linux, Application Security, Vulnerability Management, etc.). 

• Some experience with deployment of new software and maintenance of deployed software in production environments. 

• Solid analytical and problem-solving skills with ability to troubleshoot issues in distributed systems, with support from senior team members. 

• Experience handling confidential information and understanding of security best practices. 

Preferred Qualifications: 

• Familiarity with Cloud Platforms (AWS/GCP/Azure). 

• Some experience with Terraform. 

• Python/YAML/JSON scripting experience. 

• Exposure to CI/CD pipelines through Jenkins, GitLab, or similar tools. 

• Familiarity with container technologies (Kubernetes, Docker). 

• Awareness of security frameworks and compliance standards (SOC2, ISO 27001, NIST). 

• Exposure to security scanning tools and vulnerability management platforms. 

• Familiarity with monitoring and observability tools (Prometheus, Grafana, ELK stack). 

• Basic understanding of network security concepts. 

Required Education: 

• Bachelor's degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience.

• Relevant security certifications (CISSP, CISM, AWS Security, etc.) a plus but not required at this level. 

#DISNEYTECH

.