Associate Security Engineer

The Walt Disney Company is an outstanding entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies, and a variety of other businesses.

Uniting each endeavor is a dedication to crafting and delivering unforgettable experiences We are constantly looking for improvement of these experiences.

Do you want to be a part of a team that makes magic for millions of guests across all the Disney brands? Behind the scenes, the Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, response, and education across the enterprise. We protect the brand and reputation while enabling and supporting business objectives.

This engineering role will be part of the Disney Entertainment and ESPN Technology (DE&ampET) Security Engineering (SecEng) team, working with the Security Engineering Manager. The team works on-site and remotely in a global environment, with hybrid and accommodating working conditions appreciated and encouraged. Primarily based in Los Angeles and New York, we work with persons, organizations, and technology around the world.

The Engineer will work internally to the SecEng team on projects and tasks furthering both segment security and GIS corporate security goals.

This position is full-time in segment work, remote with the occasional on-site as the need arises.

What you will bring:

• Experience in responding to cybersecurity incidents.
• A keen ability to investigate technological scenarios, break them down to their base components, then identify, isolate, and communicate problems/issues.
• Ability to prioritize and work in a constantly varied and evolving environment.
• Interpersonal skills (both oral/written), including the ability to clearly communicate technical topics and risk to an audience than can include both engineers and executives.

What you will be doing:

The specialist will lead technical operations of SecEng tooling and systems, assisting other specialists on the team with deployment and administration of technical security solutions, and acting as liaison between corporate security teams and the DE&ampET technical teams for Incident Response (IR).

• Tool management such as Endpoint Detection and Response (EDR), Web Application Firewalls (WAF), Content Delivery Network (CDN) security.
• Deployments of endpoint security requirements with technical teams on workstations, servers, and cloud environments.
• IR and investigation work with corporate security and other teams such as Identity and Fraud.
• Other security related technical work as needed.

Basic Qualifications:

• Minimum of 2+ years work experience in Information Security or related technical field.
• Basic knowledge of general information security principles, practices, and procedures.
• Ability to participate in on-call and IR work, including the possibility of working nights, weekends, and/or holidays.
• Ability to function both as an individual in a group.

Preferred Qualifications:

• Experience with crafting Splunk queries or dashboards.
• Experience with SIEM and/or SOAR platforms, including the development of automations and integrations.
• Familiarity with EDR tools such as Tanium, Crowdstrike, SentinelOne, DarkTrace, Cortex EDR, etc.
• Familiarity with cloud computing (AWS, Azure, GCP) from both operational and response perspectives.
• Knowledge of scripting language, such as Python.
• Relevant certifications, such as CISSP, GCIA, GCIH, GCED, or similar, are preferred.

Education

• Bachelor’s degree in Computer Science, Information Systems, Software Engineering, Electrical or Electronics Engineering or comparable field of study, and/or equivalent work experience.