Security Engineer, Software Engineer

Department Description:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the Magic by protecting information systems and platforms.
• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
• Strengthen the business through optimizing execution, application, and technology used to protect the Company.
• Innovate by investing in core capabilities to enhance operational efficiency.

Team Description:

Work within the Security Development and Design team that is responsible for protecting the network and company assets from any security threats or attacks through the development of security automation capabilities.  This team develops and implements security tools, scripts, automation, and implementation of new technology.

Responsibilities of Role:

• Architect solutions by adhering to security best practices and to comply with security standards.
• Automate security controls to reduce our attack surface, proactively seek out vulnerabilities, and decrease response and recovery times.
• Optimize security tool deployments and introduce scalable processes across Cyber Security capabilities.
• Contribute and collaborate with other Information Security team members across the broad spectrum of information security programs, such as Threat & Vulnerability Management, Security Response, Information Protection, Risk and Compliance.
• Designs, develops, and implements new security technologies as necessary to support cloud services.
• Communicate vertically and horizontally to keep stakeholders informed.
• May perform other duties and responsibilities necessary to support and protect the business.

Must Haves:

• Minimum 3 years experience.
• Experience with scripting languages like Python, Bash, and Powershell.
• Knowledge of Javascript/Typescript, React framework
• Knowledge of Opensearch, PostgreSQL, and other data storage platforms.
• Ability to learn and continue to maintain cutting edge skills and knowledge on a variety of technical areas (Unix/Linux, Application Security, Vulnerability Management, etc.).
• Deployment of new software, and maintenance of deployed software
• Good organization skills and attention to detail.
• Demonstrated professional written, verbal, and presentation communications skills.
• Highly flexible and adaptive; able to multi-thread across a number of simultaneous work efforts.
• Sharp analytical and problem-solving skills.
• Ability to solve complex problems and develop creative alternatives, as well as, continuous process improvement skills.
• Demonstrated ability to handle confidential information.
• Proven ability to work effectively in a fast-paced environment as part of a high performance team

Nice to Haves:

• Applied skills in Cloud Platforms (AWS/GCP/Azure)
• Proficient in Typescript/Javascript - Front end development
• Proficient in Python/yaml/json - Backend development

Education:

• Bachelor’s degree in Computer Science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience