Sr Security Engineer, IR

Department Description

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) group provides services to protect the value and use of Disney’s information through collaboration, standardization, enforcement, and education across The Walt Disney Company.  The main focus areas of this group are:

• Reduce the risk of both accidental and malicious data disclosure

• Identify, monitor, engage with complete inventory of information

• Establish appropriate policies and procedures to be followed

• Educate user community to minimize risk

Team Description:

As part of the larger Security Operations and Response organization, FIRE-IR provides holistic cybersecurity incident management services across TWDC’s entire portfolio of brands, companies, and businesses, globally. Leveraging industry leading tooling, internal/external partnerships, refined threat intelligence, and best-in-class practices, FIRE-IR triages, contains, mitigates, and remediates incidents to Protect the Magic. 

Responsibilities of Role:

• Analyze, triage, and respond to potential phishing related threats to The Walt Disney Company

• Leverage log analysis, research techniques, and hunting activities to identify potential unreported or emerging threats

• Partner with other technology teams to deploy/refine proactive anti-phishing controls

• Develop rules, alerts, and other detections to improve phishing detection and correlation actions

• Assist in the development of phishing-related training and educational materials

Must Haves (Years of Experience, languages, programs, tools, etc.): 

• Minimum of 5 years of practical technology experience in security operations, email operations, or similar roles

• Knowledge of information security components, principles, practices, and procedures.

• Ability to manage multiple priorities and work effectively in a fast-paced, high volume, results driven environment.

• Ability to rapidly assess complex scenarios, solve problems, identify, isolate and communicate problems/issues.

• Effective communication and presentation skills across organizational levels 

• Basic scripting experience (e.g. Python, PowerShell, Yara)

Nice To Haves (see above):

• Experience in malware and/or phishing analysis

• Experience with cyber threat intelligence products

• Experience with building Splunk queries and dashboards

• Experience in security awareness, security training or public speaking. 

• Information Security certifications (CISSP, SANS, Security+)

Education:

• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience

The hiring range for this position in Burbank, CA $126,400 to $169,500 per year and in Seattle, WA & NYC is $132,500 to $177,600 per year, which factors in various geographic regions. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.