Disney Security Jobs (NOW HIRING)

At Disney,we'restorytellers. We make theimpossible,possible. The Walt Disney Company is a world-class entertainment andtechnological leader. Walt's passion was to continuously envision new ways to move audiences around the world-a passion thatremainsour touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news,moviesand avariety of other businesses. Uniting each endeavor is a commitment to creating and delivering unforgettable experiences - andwe'reconstantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterpriseefficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing ourconsumer experiences, enabling business growth, and advancing operational excellence.The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent,detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by combining enterpriseand business segment supported services to create a robust, efficient, and adaptable cyber security program for The Walt DisneyCompany.

Ourobjectivesare:

• Secure the Magic by protecting information systems and platforms within TWDC

• Reduce Risk by proactively assess, prevent, and detect to prevent harm to TWDC and our guests

• Enable the business through optimizing execution, application, and technology used to protect TWDC

• Innovate! We strive to strategically invest in building core capabilities to advance operational efficacy

Team Description:

Global Information Security (GIS) supports all of Disney's business segments, including Disney Entertainment & ESPN(DE&E). DE&E encompasses the operations of Disney's streaming services-Disney+, Hulu, and ESPN+-aswell asDisney's broadcast and cable networks, including ABC, ESPN, FX, Disney Channels, and National Geographic. DE&E sits atthe intersection of entertainment, sports, and technology, striving to connect viewers with beloved stories whileadvancing the streaming industry with consumer-first innovations. Security professionals supporting DE&E work withindustry-leading technologies to deliver world-class, highly secure services to customers.

Responsibilities of Role:

We are seeking aSrSoftware Engineer to design, build, andmaintaininternal applications and integrations that enhance the organization's core cybersecurity operations. This role bridges security engineering and software development, focusing on automating compliance, improving risk visibility, and accelerating security workflows through infrastructure-as-code and AI-driven modeling. This role will work closely with compliance analysts, infrastructure teams, and service owners across the enterprise to develop secure, scalable solutions supporting continuous compliance, risk modeling, and operational visibility.

• Design and develop internal cybersecurity tools and services to support compliance,visibilityand risk modeling functions.

• Build andmaintainintegrations between legacy, in-house, and cloud-based systems using APIs and SDKs.

• Implement and manageIaCframeworks to automate security configuration andauditingworkflows.

• Collaborate with compliance teams to translate audit and control requirements (SOX, PCI, etc.) into code-based solutions and enhancements in existing applications.

• Contribute to data ingestion and analytics pipelines that improve visibility across cloud and on-prem environments.

• Develop AI/ML models toassistwith automated risk categorization, configuration detection, or control validation.

• Work with DevOps and Security Engineering tomaintainconsistent RBAC, IAM, and policy enforcement across multi-cloud and Kubernetes environments.

• Build, document, andmaintainrunbooks specific to internal APIs, service architecture, and developed frameworks.

• Stay up to date on cybersecurity trends, industry standards (ISO, NIST, CIS), and regulatory requirements.

• Provide mentorship and technical guidance to engineers and analysts, ensuring secure design and operational excellence.

Must Haves:

• Minimum of5+years of experience in software development

• Experience with modern security tooling,DevSecOps, and AI/ML in cybersecurity

• Required Knowledge of:

• AWS: IAM, RBAC modeling, API and SDK-based resource discovery, Systems Manager (SSM)

• Git & GitHub: version control, branching strategies, and CI/CD pipelines

• Linux: security models, permissions, and bash scripting

• SQL: relational data modeling, queries, and integration with back-end systems

• Programming Languages: Python, C#, and/or Ruby

• Infrastructure as Code: Terraform

• Understanding of:

• Databases: user permission models for MSSQL, MySQL, PostgreSQL, Couchbase, andMemSQL

• Operating Environments: on-premises, cloud, and Kubernetes-based systems

• Identity Systems: Active Directory, LDAP, Okta; user lifecycle management and directory integrations

• Configuration & Deployment Tools: Helm and Salt

• Security Frameworks: developing control-based automation and integrating security telemetry into compliance andriskmodeling functions

Nice to Haves:

• Experience with Scala and/or Golang

• Deep understanding of cybersecurity principles and best practices

• Strong problem-solving and debugging skills in complex distributed environments

• Ability to translate security and compliance requirements into technical solutions

• Excellent collaboration and communication skills with cross-functional teams

• Strong senseof ownership and accountability for secure, maintainable code

• Relevant security certifications such as OSCP, ISC2 CISSP, AWS Certified Security - Specialty, SANS, CEH, etc. are a major plus.

Education:

• Bachelor's degree in Computer Science, Information Systems, Software, Electronics Engineering, or comparable field of study, and/or equivalent work experience

#DISNEYTECH