Staff Content Security Engineer

ジョブID 10114438 勤務地を選択 グレンデール, カリフォルニア州, アメリカ合衆国 企業名 The Walt Disney Studios 掲載日 Feb. 26, 2025

今すぐ応募

仕事内容:

The Content Security Staff Engineer reports into the Sr Manager of the Content Site Security program at The Walt Disney Studios based in Glendale, CA. The modern filmmaking process is highly complex with dependencies on an entire eco-system of 3rd party strategic partners, suppliers and vendors. This program provides assessment, consulting and advisory services to ensure the entire supply chain remains robust and resilient and allows The Walt Disney Studios' to securely create films, features and series seen across the world.

Responsibilities:

Run end-to-end Site Security assessments, specifically:
- Contacting vendors to schedule and scope assessments
- Understand the filmmaking process and various vendor workflows
- Executing the assessment
- Assess vendor against a set of over 300+ security controls
- Identify intentional or unintentional misrepresentation of security compliance
- Perform detailed inspection and analytics on various IT infrastructure configuration ranging from network, storage, endpoint devices, and cloud-based assets
- Perform real-time validation against attestation and documentation provided by the vendor
- Identifying risk areas and corresponding test procedure associated with each service type, content workflow, and underlying infrastructure
- Analyze assessment findings and document risks accordingly
- Documenting assessment result, accurately and precisely communicating requirements, and publishing the completed report
- Reviewing and negotiating vendor proposed mitigation plans and timelines
- Validating remediation implementation to ensure identified risks have been adequately addressed
Contribute to Content Security’s control framework which includes:
- Writing controls that secure both physical and digital assets.
- Drafting questions for Content Security’s questionnaire that help evaluate a vendor’s compliance to each control.
- Creating applicability matrix for each new control.
- Writing test guidance to effectively identify non-compliant implementations.

Contribute to secure configuration guides used to assess and lockdown a variety of technologies used by vendors including virtual sets and virtual headsets
Run proof-of-concepts to help optimize the assessment workflow, this includes testing new processes and tools designed to drive efficiency with our assessment methodology

Travel to offsite locations to address content security matters
Follow the progress of productions and deal with last minute requests such as the assessment of ADR locations used for last minute production needs

Basic Qualifications:

Bachelor’s degree and/or equivalent work experience
7 years of experience in information security and/or the following areas: security architecture, security engineering, production or network storage engineering, mobile device remote deployment and management, cybersecurity incident investigations, experience with cloud technologies
Ability to travel up to 25% domestically and/or internationally, as needed
Advanced knowledge of cloud security and infrastructure environments for popular cloud providers (AWS, Azure, GCP)
Prior experience in an architecture, development, engineering, or senior technical role
Experience providing product ownership for solutions supporting the Media & Entertainment industry
Ability to work in a highly distributed matrixed environment
Ability to adapt to new technologies and trends
Strong communication (written and verbal, including presentation) and listening skills
Strong documentation skills
Experience in technical project management/leading large scale technology initiatives
Strong analytical, organizational and decision-making skills
Strong negotiation skills

Broad technology expertise with application, system integration, data, and/or infrastructure knowledge
- Storage solutions (e.g., SAN, NAS, encrypted storage devices, cloud cache and storage buckets)
- Digital file transfer tools (e.g., Aspera, Signiant)
- Centralized secure configuration of Linux, Windows, and Mac based servers and endpoints
- Directory Services (e.g., Active Directory, Open Directory, LDAP)
- Device management (e.g., Microsoft InTune, Jamf, Puppet, Ansible)
- Change and patch management solutions (e.g., SCCM, Munki, PDQ Deploy)
- OS hardening best practices for both servers and workstations
- Endpoint protection and Data Loss Prevention solutions
Strong understanding of secure network principles of perimeter devices, servers, and workstations
- Working knowledge of configuring and maintaining firewalls and network switching / routing devices (e.g., Palo Alto, Sonicwall, Fortinet, Brocade, Cisco, HP)
- LAN, WAN, TCP/IP connectivity and security protocols (Point-to-Point, MPLS, VPN)
- Network architecture and layer 2 and Layer 3 routing principles
- Network authentication standards
Strong understanding of Infrastructure as a Service (IaaS) and Infrastructure as Code (IaC)
Expert knowledge in cloud security auditing tools
Working knowledge of configuring and maintaining cloud compute and storage nodes
Provisioning and deprovisioning cloud tenants
Working knowledge of Virtual Private Cloud (VPC) network access control lists
Working knowledge of Web Application Firewalls (WAFs)
Vulnerability scanning, SIEM and common methods of exploiting vulnerabilities
Computer investigation processes and techniques

Preferred Qualifications:

Degree in the following fields: Computer Science, Information Systems, IT Engineering, or a related field.
CISSP, CISA/CISM, or CEH designations
Knowledge of studio IT systems, including production and post-productions environments
Knowledge of feature film production and post-production industries, services, and workflows (e.g., DI, editing, visual/audio effects, encoding, on-set support)
Knowledge of Zero Trust Network Access (ZTNA)

The hiring range for this position in Glendale, CA is $138,900 to $186,200 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

今すぐ応募

The Walt Disney Studiosについて:

The Walt Disney Studiosは、95年以上にわたりThe Walt Disney Companyの礎となってきました。今日では、映画、物語、音楽、舞台公演などの優れた作品を、世界中のファンに届ける発信地となっています。The Walt Disney Studiosには、Disney、Walt Disney Animation Studios、Pixar Animation Studios、Marvel Studios、Lucasfilm、20th Century Studios、Searchlight Picturesといった著名な映画制作会社があります。また、世界クラスのステージショーのプロデューサーであるDisney Theatrical Productionsの本拠地でもあります。

The Walt Disney Company について:

The Walt Disney Companyは、その子会社・関連会社とともに、多様性あふれる国際企業として、Disney Entertainment、ESPN、Disney Experiencesの3事業を柱に、ファミリー向けエンターテインメントとメディアの世界をけん引しています。1920年代に小さなアニメ・スタジオとしてスタートしたDisneyは、今日のエンターテインメント業界において卓越した存在となりました。ディズニーは今後も、子供から大人まで、ご家族のだれもが楽しめる一流の物語や体験を生み出し続けます。Disneyのストーリーやキャラクター、体験は、世界中のあらゆる場所の消費者やお客様に届けられています。当社は40カ国以上で、従業員とキャストメンバーが一丸となり、世界的にも地域的にも歓迎されるエンターテインメント体験を創出しています。

このポジションはWalt Disney Picturesという事業部門の一つであるThe Walt Disney Studiosでのお仕事です。

Walt Disney Pictures は機会均等雇用主です。応募者は、人種、宗教、肌の色、性別、性的指向、ジェンダー、性自認、性表現、国籍、家柄、年齢、配偶者の有無、軍役経験の有無やその地位、健康状態、遺伝情報や障がい、または連邦法や州法、地方法で禁止されているその他の法的根拠に関係なく、雇用の検討対象となります。Disneyは、すべての人々のアイデアと決断が、成長、革新、最高のストーリーの創造に役立ち、絶えず進化する世界において、価値ある存在になれるよう支援するビジネス環境を支持します。

求人応募における障害者への配慮

The Walt Disney Company and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, visit the Disney candidate disability accommodations FAQs. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.

技術的な問題がある場合は、「よくあるご質問」をご覧ください。

採用プロセス

あなたのストーリーはどこから始まりますか？

Disney CareersやLife at Disneyブログを探索し、ウォルト・ディズニー・カンパニーで待っている素晴らしい機会について学びましょう。
ストーリーに参加する

探索できるさまざまなブランドやビジネスがあります。自分に合った機会を見つけたら、次のステップとして応募を完了させましょう。
次の章

応募が完了すると、候補者ダッシュボードへのアクセス方法が記載されたメールが届きます。ログインIDを作成し、ダッシュボードを頻繁にチェックして、応募の進捗状況を確認するようにしてください。