Principal Security Engineer

Who We Are:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance and protect these exciting experiences.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the Magic by protecting information systems and platforms.

• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.

• Strengthen the business through optimizing execution, application, and technology used to protect the Company.

• Innovate by investing in core capabilities to enhance operational efficiency

Team Description:

The DE&ET Technical Cyber Protections, a sub team under Global Information Security, focuses on designing and building best in class security solutions and services to enable our business partners and technology teams to ship world class, secure products

What You Will Do:

We are Hiring! We need a Principal Security Engineer to join our Team!

Responsibilities of Role:

The role of Principal Security Engineer will report directly to the Director, Security Architecture and Engineering and is tasked with identifying opportunities to develop, mature, and scale TCP Services. This role requires a heavy customer focus with an ability to develop relationships with business partners, technology stakeholders, and the Global Information Security team to ensure TCP services meet the demands of our customers, align to GIS strategic objectives, and are scalable, cost-efficient solutions.

As a senior member of the TCP Team, this role will also be tasked with providing leadership support through strategic thought leadership to continuously improve and mature the TCP program as well as contributing to overall maturity of the DE ISO Team.

The duties of this role include:

• Supporting Security Architecture and Engineering’s service catalog to ensure functions and features of relevant products and services meet or exceed business and customer expectations.

• Engaging with customers and key stakeholders to gather requirements for new products, features, and services, as well as collecting feedback to improve existing products, features, and services.

• Identifying key areas of opportunity such as process gaps, systemic security gaps, or technical risks that that can be addressed with TCP services or solutions or through development of new capabilities.

• Developing unique, scalable solutions to complex, technical problems in collaboration with TCP leadership that mature the Security Engineering service offerings.

• Providing a combination of strategic thought and technical subject matter expertise to the TCP team, DE ISO Team, and customers to support the development of scalable and effective security services.

• Providing technical coaching and support to security engineers and architects to overcome obstacles and challenges impeding planned work.

Must Have:

Minimum of 10 years supporting technical programs that require deep knowledge of the following:

• Defining security program strategy with demonstrable skills in developing key strategic outcomes, prioritizing, and executing on a strategic roadmap.

• Building and managing scalable cloud and on-premises security services leveraging cloud native, internally developed, or COTS tooling

• Secure control design and implementation of security process and technology across cloud, on-premises, and hybrid environments leveraging tools such as: web application firewalls, endpoint detection and response, automation and orchestration tooling, and security monitoring.

• Subject Matter Expertise in integrating and orchestrating security process and tools with custom developed applications and services and/or third-party, SaaS, IaaS, and PaaS solutions

• Strong communication and interpersonal skills to support, manage, and influence customer relationships and engagements.

• Providing security services at scale within a complex technology environment

Nice To Have:

• Expertise in common programming and scripting languages (Python, ruby, java, scala)

• Expertise with CI/CD tooling, developer pipelines, and Infrastructure as Code. (Github/lab, Jenkin, Terraform Enterprise, Cloud Formation, Artifactoy)

• Expertise with web services and platforms as a services. (AWS, GCP, Azure, Salesforce, Snowflake)

Education:

• Bachelor’s degree in Computer Science, Cyber Risk and Assurance, or equivalent work experience

The hiring range for this position in Burbank, California is $167,700-$224,900 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.