Senior Security Engineer

About Us

At Cast & Crew, we’ve empowered creativity and supported the global entertainment industry for decades. Together with our family of brands - Backstage, CAPS, Checks & Balances, Final Draft, Media Services, Sargent-Disc, and The TEAM Companies – we operate as a combined entertainment technology and services provider offering industry standard screenwriting accounting software, digital payroll products, data & reporting, and a host of creative tools.  The industry continues to move faster than ever, and the need for our expertise, our technology, and our people has never been greater.  We are a production’s best ally every step of the way. #OneCastOneCrew

Essential Functions
• Design, implement, and manage security solutions for networks, applications, cloud environments, and endpoints
• Conduct risk assessments and vulnerability scans to identify and mitigate potential security weaknesses
• Monitor security systems, analyze logs, and investigate suspicious activities or breaches
• Develop and enforce security policies, standards, and best practices across the organization
• Lead incident response efforts, including root cause analysis and remediation planning
• Stay ahead of emerging threats by researching new attack vectors and security technologies
• Collaborate with IT, DevOps, and software development teams to integrate security into the system development lifecycle
• Mentor junior team members and provide guidance on complex security challenges
• Ensure compliance with industry regulations and standards
• Evaluate and recommend security tools, products, and services to enhance the organization’s security posture
• Analyzes system logs and identifies potential issues with computer systems
• Performs routine audits of systems and software
• Installs and maintains compute infrastructure (e.g., Operating systems: Linux/Windows/AMI, Dell VxRail, VMware, Storage, or related equipment or technology)
• Applies operating system updates, patches, and configuration changes
• Plans, coordinates, and installs various operating system and application software on a variety of servers
• Designs, manages, and supports Internal & external DNS, DHCP, Domain Controllers, SSL/TLS Cert Management
• Reviews and designs automation methodologies for Infrastructure systems (e.g., Ansible, PowerShell DSC, Terraform, Python, etc.)
• Interfaces with staff assigned to applications development to maintain familiarity with application development
• Adheres to corporate change management policies & procedures to meet all required SOC1, SOC2 compliance and delivers evidence and artifacts during audits

Core Competencies
Technology and Systems Knowledge
• Deep understanding of cybersecurity principles, including network security, application security, identity and access management (IAM), cryptography, and threat intelligence
• Expert level understanding and experience with Windows & Linux, Active Directory, Azure AD, Okta, O365, DNS, AWS Cloud and security tools (e.g., Rapid7, Sophos, etc.)
• Experience with penetration testing, threat modeling, and vulnerability management
• Expert level understanding and experience with virtualization platforms (VMware)
• Advanced level expertise with hyper-converged infrastructure and VMware
• Knowledge of zero-trust architecture and advanced endpoint protection
• Expert level understanding of Disaster Recovery and backup systems such as AWS backup, Commvault, Veeam etc.
• Significant experience with identity and access management platforms (Okta, Azure)

Business Acumen, Communication and Process Knowledge
• Demonstrates a continually growing knowledge of Company’s internal business practices, processes and the daily IT operational needs of the users
• Builds excellent working relations with all IT colleagues and users, works effectively with department and executive management, and maintains a professional relationship with outside clients
• Clear and concise communication with both technical and non-technical stakeholders and is comfortable in group or small team settings
• Excellent problem-solving skills and the ability to work under pressure during security incidents
• Strong communication skills to explain technical concepts to non-technical stakeholders

Planning, Organizing, Prioritizing, Delivering
• Effectively plans and organizes daily work following priorities set by the management and service desk tickets when appropriate
• Demonstrates strong follow-up and follow-through skills in ensuring timely completion of projects and end user support
• Self-starter who actively takes responsibility to resolve technical problems but also knows when to ask questions to avoid major delays in delivery of work product

Requirements
• 5 years of experience in cybersecurity, with at least 2 years in a senior or lead role
• 5 years of experience in vulnerability remediation and management
• 6 years of work experience in Systems Engineering and Architecting
• 6 years of experience supporting Linux and Windows environments
• 6 years of recent server/AD/O365/Okta
• 6 years of experience supporting enterprise-grade storage products
• Ability to create clear documentation and draw effective diagrams
• Bachelor’s degree in relevant field or equivalent work experience
• Relevant security certifications like CISSP, CISA, CISM, OSCP
• Cloud experience with a focus on AWS
• AWS/Azure certification is a plus
• Network knowledge is a plus
• Experience in the Entertainment Industry a plus

Physical Demands
• SEDENTARY - Exerts up to 10 lbs. of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, or pull. Involves sitting most of the time but may involve walking or standing for brief periods of time.

Benefits 

Cast & Crew provides a comprehensive package of employee benefits including: Medical, Dental, Vision, PTO, health and wellness programs, employee discounts, and more! Note: Cast & Crew benefits are subject to eligibility requirements.

Cast & Crew is an equal opportunity employer committed to hiring a diverse workforce and sustaining an inclusive culture. It is our policy to provide equal employment opportunities to all individuals based on job-related qualifications and ability to perform a job, without regard to age, gender, gender identity, sexual orientation, race, color, religion, creed, national origin, disability, genetic information, veteran status, citizenship or marital status, and to maintain a non-discriminatory environment free from intimidation, harassment or bias based upon these grounds.

CA residents
Your personal information may be collected in connection with certain services provided by Cast & Crew or its affiliated companies.  A summary of your California privacy rights can be found at: https://www.castandcrew.com/privacy-policy/

Compensation is commensurate with various factors including, but not limited to, relevant experience, qualifications, skills, training, licensure, certifications, geographic cost of labor, and other business and organizational needs. Compensation range for candidates in other locations may differ based on the cost of labor in that location. The compensation range for this position is: $115,000.00 - $155,000.00 per year.

Salary : $115,000 - $155,000