Staff Security Engineer

Job Posting Title:

Staff Security Engineer

Req ID:

10120702

Job Description:

Enterprise Technology is an organization within Disney that has a mission to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. The Enterprise Technology organization drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.  

Our business customers encompass all domestic and international businesses and brands across The Walt Disney Company including Disney Studios, Walt Disney Parks & Resorts, ESPN, ABC, Marvel Studios, & Pixar to name a few. 

Who we are:

Disney Streaming’s Security Engineering (DESecEng) team provides engineering and tooling support for the Information Security team, Product teams, and Operations teams within Disney Entertainment and ESPN Technology (DE&ET). The team builds applications and automations, manages infrastructure, and directly supports Information Security initiatives for DEEPT and the wider Walt Disney Company’s Global Information Security (GIS) team.

​

What you will do:

• Design, develop, and deploy scalable automation strategies to secure systems, products, networks, and Disney content. 

• Manage, maintain, document, train on, and improve Information Security tools and their operation within the DE&ET environment. 

• Research and introduce technologies and procedures to assist and improve the DE&ET information security posture. 

• Collaborate with partner teams to understand security needs and dependencies, and assist those teams in meeting GIS security goals. 

• Follow secure coding and review practices for code development and configuration deployment. 

• Develop and maintain code branches and environments for DESecEng owned code and tooling, utilizing best practice code hygine. 

• Assist with Incident Response as an escalation resource and subject matter expert. 

• Establish and implement procedures and mechanisms for protecting physical, digital, and media assets; safeguard accounts and access for users and data within the network and DE&ET assets; and protect Guest accounts and data. 

• Guide and train junior engineers in code development, security strategy and policy, and security response as needed. 

Qualifications:

• A minimum of 7 years’ experience in the Information Security field.

• Proficient in object-oriented design and familiarity with Python or similar programming languages.

• Strong verbal and written communication skills (e.g. white boarding/diagramming system behavior, documenting playbooks, writing incident reports).

• Knowledge and familiarity with infrastructure-as-code products and principles, and its implementation with cloud environments. - Experience working with version control software (e.g. GitHub) and issue/project tracking software (e.g. Jira).

Required Education:

• ​Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

The hiring range for this position in Santa Monica, CA is $138,900 to $186,200 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long