Staff Content Security Engineer

The Content Security Staff Engineer reports into the Sr Manager of the Content Site Security program at The Walt Disney Studios based in Glendale, CA. The modern filmmaking process is highly complex with dependencies on an entire eco-system of 3rd party strategic partners, suppliers and vendors. This program provides assessment, consulting and advisory services to ensure the entire supply chain remains robust and resilient and allows The Walt Disney Studios to securely create films, features and series seen across the world.

To be considered for an interview, please make sure your application is full in line with the job specs as found below.

Responsibilities : Run end-to-end Site Security assessments, specifically :

Contacting vendors to schedule and scope assessmentsUnderstand the filmmaking process and various vendor workflowsExecuting the assessmentAssess vendor against a set of over 300 security controlsIdentify intentional or unintentional misrepresentation of security compliancePerform detailed inspection and analytics on various IT infrastructure configuration ranging from network, storage, endpoint devices, and cloud-based assetsPerform real-time validation against attestation and documentation provided by the vendorIdentifying risk areas and corresponding test procedure associated with each service type, content workflow, and underlying infrastructureAnalyze assessment findings and document risks accordinglyDocumenting assessment result, accurately and precisely communicating requirements, and publishing the completed reportReviewing and negotiating vendor proposed mitigation plans and timelinesValidating remediation implementation to ensure identified risks have been adequately addressed

Contribute to Content Security’s control framework which includes :

Writing controls that secure both physical and digital assets.Drafting questions for Content Security’s questionnaire that help evaluate a vendor’s compliance to each control.Creating applicability matrix for each new control.Writing test guidance to effectively identify non-compliant implementations.

Contribute to secure configuration guides used to assess and lockdown a variety of technologies used by vendors including virtual sets and virtual headsetsRun proof-of-concepts to help optimize the assessment workflow, this includes testing new processes and tools designed to drive efficiency with our assessment methodologyTravel to offsite locations to address content security mattersFollow the progress of productions and deal with last minute requests such as the assessment of ADR locations used for last minute production needsBasic Qualifications : Bachelor’s degree and / or equivalent work experience7 years of experience in information security and / or the following areas : security architecture, security engineering, production or network storage engineering, mobile device remote deployment and management, cybersecurity incident investigations, experience with cloud technologiesAbility to travel up to 25% domestically and / or internationally, as neededAdvanced knowledge of cloud security and infrastructure environments for popular cloud providers (AWS, Azure, GCP)Prior experience in an architecture, development, engineering, or senior technical roleExperience providing product ownership for solutions supporting the Media & Entertainment industryAbility to work in a highly distributed matrixed environmentAbility to adapt to new technologies and trendsStrong communication (written and verbal, including presentation) and listening skillsStrong documentation skillsExperience in technical project management / leading large scale technology initiativesStrong analytical, organizational and decision-making skillsStrong negotiation skillsBroad technology expertise with application, system integration, data, and / or infrastructure knowledge

Storage solutions (e.g., SAN, NAS, encrypted storage devices, cloud cache and storage buckets)Digital file transfer tools (e.g., Aspera, Signiant)Centralized secure configuration of Linux, Windows, and Mac based servers and endpointsDirectory Services (e.g., Active Directory, Open Directory, LDAP)Device management (e.g., Microsoft InTune, Jamf, Puppet, Ansible)Change and patch management solutions (e.g., SCCM, Munki, PDQ Deploy)OS hardening best practices for both servers and workstationsEndpoint protection and Data Loss Prevention solutions

Strong understanding of secure network principles of perimeter devices, servers, and workstations

Working knowledge of configuring and maintaining firewalls and network switching / routing devices (e.g., Palo Alto, Sonicwall, Fortinet, Brocade, Cisco, HP)LAN, WAN, TCP / IP connectivity and security protocols (Point-to-Point, MPLS, VPN)Network architecture and layer 2 and Layer 3 routing principlesNetwork authentication standards

Strong understanding of Infrastructure as a Service (IaaS) and Infrastructure as Code (IaC)Expert knowledge in cloud security auditing toolsWorking knowledge of configuring and maintaining cloud compute and storage nodesProvisioning and deprovisioning cloud tenantsWorking knowledge of Virtual Private Cloud (VPC) network access control listsWorking knowledge of Web Application Firewalls (WAFs)Vulnerability scanning, SIEM and common methods of exploiting vulnerabilitiesComputer investigation processes and techniquesPreferred Qualifications : Degree in the following fields : Computer Science, Information Systems, IT Engineering, or a related field.CISSP, CISA / CISM, or CEH designationsKnowledge of studio IT systems, including production and post-productions environmentsKnowledge of feature film production and post-production industries, services, and workflows (e.g., DI, editing, visual / audio effects, encoding, on-set support)Knowledge of Zero Trust Network Access (ZTNA)

J-18808-Ljbffr