Director, Content Security Engineering
樂享魔法
員工和演藝人員是我們一切工作的核心,因此 Disney 提供具有競爭力的全面獎勵方案,包括薪資、健康和儲蓄福利、休假計劃、教育機會等。
*福利和資格可能因企業和地點而異
- 健康保險與健康
- 托兒選項
- 有薪假期
- 退休計劃
- 學費援助
- 每週支薪
「直到我來到這裡之前,我不認為我覺得好玩才去做的事——透過統計數據講述體育故事——會成為我的工作。」
ESPN 高級研究員 Ana
工作概要:
Director, Content Security Engineering
The Walt Disney Studios includes Lucasfilm, Pixar, Walt Disney Animation, 20th Century Studios, Searchlight, Walt Disney Pictures, and Marvel Studios. The Content Security team supports these Studios by protecting and implementing a multi-faceted strategy of consulting, guidance, policy, risk assessments and technical capabilities.
The Director, Content Security reports into the Vice President of Content Security at The Walt Disney Studios based in Glendale, CA and is responsible for supporting the securing of all creative content produced at the Walt Disney Studios. The Director, Content Security Engineering will oversee the security assessment program which will cover both first-party and third-party applications and cloud environments. Additionally, the Director, Content Security Engineering will oversee providing technical consulting and provide guidance on the secure implementation of technology solutions to enable the secure management of Studios’ pre-release content.
Overall responsibilities
Develop the strategy and manage key program execution including, but not limited to:
Application Security – Support internal development teams who build and engineer mission critical systems
3rd Party Application Security – Oversee and provide vendor security assessment services
Influence Engineering Roadmaps – work with development teams (both 1st and 3rd party) to influence their engineering roadmaps to prioritize content protection features and harden and mature existing features that would benefit Disney Studios’ mission of securing our content
Cloud Security – Heavy dependency on AWS. Implement and oversee robust proactive monitoring and secure configuration program to ensure cloud usage remains secure, is workloads are deployed secure by default and any security deviations are detected and corrected in real time
Serve as a Subject Matter Expert providing technical guidance around security best practices encompassing applications, cloud infrastructure, and facilities
Partner with other internal security teams to deliver application security services that cover the entire Disney Studios application portfolio
Provide technical solutions, consulting, and recommendations to internal and external business units with an emphasis around secure network architecture, secure storage, secure data centers and hardening best practices
Drive the continued improvement of existing program-based documentation (e.g. standards, process, and communications)
Socialize security programs and initiatives internally and externally, including the development and delivery of executive-level presentations
Evaluate and test business processes / controls and identify areas of risk, and develop mitigation plans
Oversee day-to-day teams' operation and performance
Monitor team performance and report on metrics to the Vice President
Lead security programs with an emphasis on digital security, physical security, reliability, information assurance, and related processes
Formally define baseline Studio security requirements by leading development of Application, Cloud and Facility Security frameworks
Manage all aspects of the evaluation lifecycle, including planning, fieldwork, reporting and archiving
Delegate tasks and set project deadlines
Apply current knowledge of IT trends and systems processes to identify security and risk management issues and opportunities for improvement
Work with internal assurance teams and business unit stakeholders to assess vendor evaluation strategy, cloud strategy, define objectives, and address technology-related controls risks and issues
Act as Application / Cloud Security subject matter expert to vendors and in-house personnel
Develop and deliver training materials and perform general security awareness and specific security technology training
Evaluate and recommend new and emerging security products and technologies
Willingness to travel up to 25% domestically and internationally
Experience and qualification
10+ years experience executing and then managing technical security assessment and risk functions for large heterogeneous environments
7+ years of experience in information security with emphasis in the following areas: security architecture, security engineering, system and network security, authentication and protocols, cryptography, and application security
4+ years of experience with cloud technologies
Advanced knowledge of cloud security and infrastructure environments for top tier cloud providers
Prior experience managing diverse and multi-location based technical teams required
Prior experience in the entertainment industry preferred
CISSP, CISM, or other security certifications preferred
Required skills
Broad technical skills in conducting security assessment against established security frameworks (e.g., ISO 17799/27002, PCI, MPAA)
Extremely strong communication, executive presence and emotional intelligence skills
Strong ability to convey technical issues to a less technical audience
Strong knowledge of common application vulnerabilities, with a proven track record of partnering with implementation teams on remediation
Broad technology expertise with application, system integration, data, infrastructure, and device management knowledge
Understanding of identity and access management fundamentals, including SSO protocols and multi-factor authentication solutions
Strong understanding of secure network principles of perimeter devices, servers, and workstations
LAN, WAN, TCP/IP connectivity and security protocols (Point-to-Point, MPLS, VPN)
Directory Services (e.g., Active Directory, Open Directory, LDAP)
Storage solutions (e.g., SAN, NAS, encrypted storage mechanisms)
Digital transfer tools (e.g., Aspera, Signiant)
OS hardening best practices for both servers and workstations
Understanding of incident investigation processes and techniques
Desired skills
Knowledge of studio IT systems, including production and post-productions environments
Thorough knowledge of feature film production and post-production industries, services, and workflows (e.g., DI, editing, visual/audio effects, encoding, on-set support)
Understand the security considerations of systems that leverage AI/ML, including generative AI
Experience working with or assessing media specific systems and content protection solutions (DRM, watermarking, encryption, streaming protocols, etc.)
Certifications in one or more of the following desired - AWS, CCNP, CISSP, CISM, CISA, GIAC, CEH, ITIL, VCP, VCAP
Experience in technical project management/leading large scale technology initiatives
Strong negotiation skills
Job Related Education
Bachelor's degree in computer science, Information Systems, IT Engineering, or a related field
Masters in one of the above or MBA desired
The hiring range for this position in Glendale, CA is $180,700.00 to $242,300.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.
關於The Walt Disney Studios:
超過 95 年來,The Walt Disney Studios 一直是 The Walt Disney Company 建立的基石。時至今日,其將優質電影、情節故事、音樂及舞台劇獻給世界各地的消費者。The Walt Disney Studios 坐擁一系列備受尊崇的電影工作室,包括 Disney、Walt Disney Animation Studios、Pixar Animation Studios、Marvel Studios、Lucasfilm、20th Century Studios 及 Searchlight Pictures。旗下亦設有世界級舞台表演製作商 Disney Theatrical Productions。
關於 The Walt Disney Company:
Walt Disney Company 連同其子公司和聯營公司,是領先的多元化國際家庭娛樂和媒體企業,其業務主要涉及三個範疇:Disney Entertainment、ESPN 及 Disney Experiences。Disney 在 1920 年代的起步之初,只是一間卡通工作室,至今已成為娛樂界的翹楚,並昂然堅守傳承,繼續為家庭中每位成員創造世界一流的故事與體驗。Disney 的故事、人物與體驗傳遍世界每個角落,深入人心。我們在 40 多個國家/地區營運業務,僱員及演藝人員攜手協力,創造全球和當地人們都珍愛的娛樂體驗。
這個職位隸屬於 Walt Disney Pictures,其所屬的業務部門是 The Walt Disney Studios。
Walt Disney Pictures 是提供平等就業機會的僱主。求職者都會獲得聘僱考量的機會,不分種族、宗教、膚色、生理性別、性傾向、社會性別、性別認同、性別表達、原國籍、血統、年齡、婚姻狀態、軍人或退伍軍人身份、醫療狀況、遺傳資訊或殘疾狀況、或者聯邦、州級或地方法律所禁止的其他任何基本特徵。Disney 提倡讓所有人的想法和決策都有助我們發展、創新、創造最好故事的商業環境,並與瞬息萬變的世界息息相關。
就業申請的殘疾便利安排
The Walt Disney Company 及其聯營公司是推動平等就業機會的僱主,歡迎所有求職者,包括殘疾人士及殘疾退伍軍人。如你是殘疾人士,並需要合理便利安排以搜尋職位空缺或申請職位,請將要求發送至Candidate.Accommodations@Disney.com。本電郵地址不擬用於一般僱傭查詢或通訊。我們只會回應與網上申請系統殘疾人士無障礙功能相關的要求。
遇到技術問題?查看常見問題以尋求協助。
招聘流程
-
您的故事從哪裡開始?
探索 Disney 職位空缺和 The Life at Disney 網誌,了解華特迪士尼公司有待發掘的所有精彩機會。
-
迪士尼的故事裏,有你更精彩成就迪士尼故事
有許多不同品牌和業務可供探索。當您找到適合您的機會後,請填寫您的申請,進行下一步。
-
下一章
申請後,您將收到一封電子郵件,讓您可存取應徵者控制面板。建立您的登入資料,並確保經常檢視您的控制面板,以查看申請進度。
探索此地點 加州格倫代爾
這個位於洛杉磯縣的城巿擁有正宗的中東美食、文化和自己的「星光大道」。
相關工作
- Ride Controls Systems Engineer Walt Disney Imagineering 10064691 格倫代爾, 加利福尼亚州 申請
- Lead Prompt Engineer, AI Solutions and Development Disney Experiences 10097409 奧蘭多, 佛罗里达州 / 格倫代爾, 加利福尼亚州 / 西雅圖, 华盛顿州 申請
- Sr Software Engineer (Android) Disney Entertainment & ESPN Technology 10095352 纽约, 纽约州 / 圣莫尼卡, 加利福尼亚州 / 伯班克, 加利福尼亚州 / 旧金山, 加利福尼亚州 / 西雅圖, 华盛顿州 / 格倫代爾, 加利福尼亚州 申請
我們的文化
登記收取職缺通知
即時收到最新的工作機會的資訊。
分享
連結會在新分頁中開啟。