Staff Content Security Engineer

The Walt Disney Studios is a leader in the industry that brings memorable, life-changing stories to the world through Disney Motion Picture Productions (MPP), Marvel Studios, Pixar, Walt Disney Animation Studios, 20th Century Studios, Searchlight Pictures, and Lucasfilm. The incredible movies, shows, and characters that have come to life on the big screen and in our homes are thoroughly embedded in minds and cultures across the globe. From the Marvel Cinematic Universe, reinvented live action classics, multi-film franchises, and Oscar winning films, the studios have redefined movie and series making by building a universe filled with creativity, innovation, and collaboration. At The Walt Disney Studios, you will be part of a team that helps propel our legacy into the future with a vision as far-reaching as our characters, worlds, and stories.

The Content Security organization is focused on protecting the magic – we ensure that all film and episodic content is protected and does not leak. We do this by employing the best practices from the world of Cyber Security, technology, and a deep understanding of the world of media and entertainment creative workflows.

We are looking for a Content Security Staff Engineer – a true innovator and thought leader, whom, as an individual contributor will have Studio and industry wide impact. The successful candidate will have a technical background and a willingness to learn and have a passion for the world of film. As the world of technology changes around us, we expect to encounter both new challenges and risks, as well as significant opportunities. Therefore, this role will be heavily focused on helping to secure artificial intelligence and machine learning technologies. Even though AI will be a significant portion of the role, there may also be opportunity to participate and lead other security initiatives in the application and cloud security space.

Given this broad range of responsibility, the successful candidate can deal with ambiguity, provide clarity where none exists and be able to step into and navigate a complex and high-paced environment of hardworking, friendly, and passionate people. The ideal candidate is someone who enjoys being the technical SME, a self-starting mitigator of emerging risks and a problem solver. It is essential that they are a thought leader, confident, and someone who will continue to drive the organization and initiatives critical to the success of Content Security.

Responsibilities:

• Stay on top of the latest trends in AI and AI attack techniques to inform the organization of emerging threats, with particular attention to Media and Entertainment use cases
• Work as an AI security SME consulting with teams implementing internally developed and third party developed AI tooling, also acting as a trusted advisor to studio leadership, providing clear communication of AI security risks, mitigations, and program progress.
• Develop, lead, and manage AI security initiatives, in partnership with business stakeholders and other security teams
• Collaborate with cross-functional teams to integrate security best practices into MLOps and other new workflows
• Lead efforts to develop AI security testing capabilities for continuous assessment, serving as the primary point of contact
• Perform risk assessments against AI enabled applications and models, delivering actionable, relevant insights to system stakeholders and leadership
• Formulate and publish guidance to help secure AI technologies used for internal and external facing workflows
• Independently manage work tasks from assignment through delivery
• Provide guidance and technical mentorship to junior resources on the team
• Efficiently manage time to between workloads related to Application & Cloud Security and AI Security (40/60%, respectively)

Basic Qualifications:

• Bachelor’s degree in computer science, data science, engineering, or a related field
• 7+ years' experience in cyber security, with experience in risk management, threat modeling and cloud security
• Proven experience with designing & managing security programs for AI/ML systems or cloud-based applications, deploying secure infrastructure and applications.
• Strong familiarity with architecting and/or assessing infrastructure deployed on-premises and cloud hosted environments (AWS, GCP and Azure)
• Experience communicating security risks and project status to non-technical stakeholders, including senior management and executive leadership
• Demonstrated curiosity and a proactive approach to learning and problem-solving
• Experience with AI/ML solutions on major cloud platforms such as azure, google, AWS, along with OpenAI

Preferred Qualifications  

• Experience in the media & entertainment industry or with securing content workflows
• AI/ML certifications (e.g., Azure AI Engineer Associate, AWS Certified ML)
• InfoSec certifications such as CISSP, CCSP
• Experience managing security projects
• Master’s degree in engineering or related field