Principal Security Engineer

Job Posting Title:

Principal Security Engineer

Req ID:

10123384

Job Description:

Who We Are:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance and protect these exciting experiences.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the Magic by protecting information systems and platforms.

• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.

• Strengthen the business through optimizing execution, application, and technology used to protect the Company.

• Innovate by investing in core capabilities to enhance operational efficiency

Team Description:

The DE&ET Technical Cyber Protections, a sub team under Global Information Security, focuses on designing and building best in class security solutions and services to enable our business partners and technology teams to ship world class, secure products

What You Will Do:

We are Hiring! We need a Principal Security Engineer to join our Team!

Responsibilities of Role:

The role of Principal Security Engineer will report directly to the Director, Security Architecture and Engineering and is tasked with identifying opportunities to develop, mature, and scale TCP Services. This role requires a heavy customer focus with an ability to develop relationships with business partners, technology stakeholders, and the Global Information Security team to ensure TCP services meet the demands of our customers, align to GIS strategic objectives, and are scalable, cost-efficient solutions.

As a senior member of the TCP Team, this role will also be tasked with providing leadership support through strategic thought leadership to continuously improve and mature the TCP program as well as contributing to overall maturity of the DE ISO Team.

The duties of this role include:

• Supporting Security Architecture and Engineering’s service catalog to ensure functions and features of relevant products and services meet or exceed business and customer expectations.

• Engaging with customers and key stakeholders to gather requirements for new products, features, and services, as well as collecting feedback to improve existing products, features, and services.

• Identifying key areas of opportunity such as process gaps, systemic security gaps, or technical risks that that can be addressed with TCP services or solutions or through development of new capabilities.

• Developing unique, scalable solutions to complex, technical problems in collaboration with TCP leadership that mature the Security Engineering service offerings.

• Providing a combination of strategic thought and technical subject matter expertise to the TCP team, DE ISO Team, and customers to support the development of scalable and effective security services.

• Providing technical coaching and support to security engineers and architects to overcome obstacles and challenges impeding planned work.

Must Have:

Minimum of 10 years supporting technical programs that require deep knowledge of the following:

• Defining security program strategy with demonstrable skills in developing key strategic outcomes, prioritizing, and executing on a strategic roadmap.

• Building and managing scalable cloud and on-premises security services leveraging cloud native, internally developed, or COTS tooling

• Secure control design and implementation of security process and technology across cloud, on-premises, and hybrid environments leveraging tools such as: web application firewalls, endpoint detection and response, automation and orchestration tooling, and security