Sr. Security Engineer

Overview:
On any given day at Disney Entertainment & ESPN Technology, we're reimagining ways to create magical viewing experiences for the world's most beloved stories while also transforming Disney's media business for the future. Whether that's evolving our streaming and digital products in new and immersive ways, powering worldwide advertising and distribution to maximize flexibility and efficiency, or delivering Disney's unmatched entertainment and sports content, every day is a moment to make a difference to partners and to hundreds of millions of people around the world.

• Building the future of Disney's media business: DE&E Technologists are designing and building the infrastructure that will power Disney's media, advertising, and distribution businesses for years to come.
• Reach & Scale: The products and platforms this group builds and operates delight millions of consumers every minute of every day - from Disney+ and Hulu, to ABC News and Entertainment, to ESPN and ESPN+, and much more.
• Innovation: We develop and execute groundbreaking products and techniques that shape industry norms and enhance how audiences experience sports, entertainment & news.

Disney+ is the Disney-branded streaming service featuring an outstanding collection of content from its brands and franchises recognized and respected all over the world including Star Wars, Marvel, Pixar, Disney, and NatGeo. Hulu is a premium streaming service that offers premium originals, current season TV, a massive library of hit series and movies, and live television.
Our combined Disney and Hulu team is looking for hardworking team players to join the Growth Fraud Prevention and Security team, who will thrive upon the legacy of Disney and Hulu, embrace unconventional thinking, and who are passionate about contributing to The Walt Disney Company's direct-to-consumer (DTC) experience through strategic hard work and determination.
The Growth Fraud and Security team is responsible for protecting our customers and our services from bad actors. Our team is looking for an Application Security Engineer to help validate that our services are designed and implemented to the highest security standards. You will be responsible for analyzing the security of our services, testing, identify and addressing security issues. A successful candidate will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include project and software development work.
Responsibilities:

• Application security reviews for our services and applications.
• Penetration testing for critical services and applications.
• Security code reviews for critical changes during the development phase.
• Security training and outreach to internal development teams.
• Security best practices documentation.

Basic Requirements:

• BS in Computer Science or related field, or equivalent work experience.
• 5+ years of experience with any of the following: threat modeling, secure coding, identity management and authentication, penetration testing and network security.
• Experience with AWS Architecture (Lambda, SNS/SQS Messaging, API gateway, S3, ECS).
• Experience working with Continuous Integration and Deployment tools - e.g., Maven, Jenkins 2, Ansible, GITHUB, Kubernetes, Rancher, Docker

Preferred Qualifications:

• Experience implementing security solutions at organization level.
• Understanding of web services.
• Experience with multiple programming languages (such as, Java, Scala, Kotlin, Python, etc.)
• Strong technical, problem-solving, analytical, communication and interpersonal skills.
• Excellent written and verbal communication skills.
• Proven ability to work with all members of an extended and diverse project team.
• Must be detail-oriented, self-organized, committed to quality and be capable of tracking multiple issues simultaneously.
• Ability to function in a virtual team setting and effectively collaborate globally.
• A desire to work in a fast-paced and challenging work environment.

The hiring range for this position in Washington, California and New York is $136,100 to $191,000 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.