Security Engineer - Product Security Job at The Walt Disney Company (Corporate), Burbank, CA

TjZzcTZEK2hnUldnQ0taYllCNXpPZGRPbkE9PQ==
  • The Walt Disney Company (Corporate)
  • Burbank, CA

Job Description

Job Summary:

Who We Are:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS)  organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

  • Secure the Magic by protecting information systems and platforms.

  • Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.

  • Strengthen the business through optimizing execution, application, and technology used to protect the Company.

  • Innovate by investing in core capabilities to enhance operational efficiency.

Team Description:

The Product Security Team at The Walt Disney Company is dedicated to safeguarding the digital assets and intellectual property of one of the world's most beloved entertainment companies. Our team plays a crucial role in ensuring the security and integrity of Disney's diverse range of products and services, which span across theme parks, resorts, cruise lines, sports, news, movies, and various other businesses.

We are a dynamic and collaborative team that partners with engineering teams across the enterprise. Our mission is to mitigate technical risk by identifying vulnerabilities in Disney products, providing education to engineering teams on remediation techniques, and collaborating with other security teams to ensure the protection of our guests.

Our team is responsible for conducting security assessments, managing customer interactions, and developing security solutions that align with Disney's business strategies. We leverage cutting-edge technology and innovative approaches to enhance consumer experiences, enable business growth, and advance operational excellence.

What You Will Do:

We Are Hiring! We need a Security Engineer - Product Security to join our Team!

Responsibilities of Role:

  • Manage and develop security partnerships with existing and new businesses of the TWDC to continually educate technology teams on reducing risk and integrating security into their product development.

  • Collaborate with engineers and information security teams to address security risks and provide mitigation recommendations within the Software Development Lifecycle (SDLC).

  • Support security assurance audits of our Product Security testing to help internal and external customers navigate and validate security compliance.

  • Perform activities such as security testing reviews with teams, product demos and trainings, and building documentation to help enable engineering teams to test their products and release with security embedded into their SDLC.

  • Regularly interact with internal and external customers on security-related projects and operational tasks. Design, build and deploy automation to scale the orchestration of security testing across all TWDC applications and platforms.

Must Have:

  • Minimum 3+ years of experience in cybersecurity, application security, or related information technology disciplines.

  • Programming/scripting skills with a language such as Python to automate work.

  • Proven experience collaborating with teams on security and building trust through delivery and data.

  • Strong understanding of at least two of the following security testing principles and practices, such as SAST, SCA, DAST, API, Mobile and Penetration testing.

  • Excellent communication and collaboration skills.

  • Ability to work in a fast paced, dynamic environment.  

Nice To Have:

  • Experience with security tooling and methodologies

  • Experience integrating security checks into CI/CD pipelines or penetration testing.

  • Experience with SBOMs and the security of the software supply chain.

  • Familiarity with cloud security principles and technologies.

  • Relevant certifications such as: GWAPT, OSWE, BSCP, CompTIA Security+ are highly desirable.

Education:

Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience.

#DISNEYTECH

The hiring range for this position in Burbank, California is $104,600 - $140,200 per year and in Seattle, Washington is $109,500 - $146,800 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

Job Tags

Work experience placement,

Similar Jobs

SP Associates

Industrial Engineer - 1362 Job at SP Associates

 ...assure compliance with Sigvaris policies, industry standards, ISO 13485 standards, and...  ...communication methods. # Director of Engineering and/or appropriate management staff are...  ...in a manufacturing environment beyond internship, preferably in the textile industry.... 

CenterWell Home Health

Clinical Manager, Home Health Job at CenterWell Home Health

 ...Become a part of our caring community and help us put health first The Clinical Manager coordinates and oversees all direct care patient services provided by clinical personnel. Develops, plans, implements, analyzes, and organizes clinical operations... 

Get It - Executive

Entry Level Mortgage Loan Officer ($1000 sign on bonus after 30 days) Job at Get It - Executive

 ...looking to start or grow your career in the mortgage industry? If you have strong...  ...'ll work closely with licensed Purchase Loan Officers, assisting with gathering essential information...  ...customer experience. This role is a great entry point into the mortgage industry,... 

Megan soft Inc

Cyber Security Consultant/Expert (W2 Position) Job at Megan soft Inc

 ...We have a job opportunity of a Role Cyber Security Consultant/Expert with given job description on W2 . Please forward updated profile to ****@*****.*** or (***) ***-****. Position Title: Cyber Security Consultant/Expert (W2 Position) Location: Dearborn... 

Gulfstream Strategic Placements, LLC

Construction Superintendent/Project Manager Job at Gulfstream Strategic Placements, LLC

Construction Superintendent/Project Manager job for Department of Defense construction company in Lincoln, NEWe are a growing general contractor that specializes in working on DOD projects for the Army, Navy and other government agencies. We are currently hiring for...