Sr Security Specialist, VM

[{{ $ | translate}}] Sr Security Specialist, VM
The Walt Disney Company (Corporate)

Interested in this opportunity ?

Job description

At Disney, we‘re storytellers. We make the impossible, possible. We do this through utilizing and developing cutting-edge technology and pushing the envelope to bring stories to life through our movies, products, interactive games, parks and resorts, and media networks. Now is your chance to join our talented team that delivers unparalleled creative content to audiences around the world.
Enterprise Vulnerability Management ensures that IP-enabled devices connected to TWDC’s networks and used for conducting and delivering Disney business are known, secure and managed to an acceptable risk level. Vulnerability Management programs protect TWDC intellectual property and data by ensuring servers are compliant with:
  • IT Security Policies and Standards
  • Data Handling Standards
  • Minimum Security Baselines
  • Industry and vendor-specific vulnerabilities

The Enterprise Vulnerability Management team is responsible for the full cycle of vulnerability management across all segments of The Walt Disney Company. Infrastructure and application vulnerabilities are assessed within the context of the technologies used at TWDC. Risk-based remediation activities identified and coordinated across diverse stakeholders company-wide. Server compliance is monitored via periodic scans from various IT Security tools. Areas of non-compliance identified and documented.
ResponsibilitiesInformation Security Specialist, Vulnerability Management, has a broad range of responsibilities within the Global Information Security vulnerability management program, with emphasis on risk assessment, remediation, and customer engagement to ensure the removal of vulnerabilities from the technology environment. This role is directly responsible for infrastructure and application vulnerability research, analysis, categorization, and communication of risks posed in the context of technologies in use within TWDC. This role will work closely with other members of the Vulnerability Management team to ensure the effective and efficient execution of vulnerability treatments by diverse customer groups across the Enterprise. Other responsibilities include and are not limited to:
  • Evaluate all new security vulnerabilities identified by vendors of technologies used within the Enterprise
  • Investigate solutions and mitigations for vulnerabilities present within the Enterprise, and propose remediation in collaboration with the subject matter experts
  • Support execution of vulnerability management programs through meeting facilitation, activity measurement, customer engagement, and program education
  • Perform barrier analysis on vulnerability remediation and work with Information Security and Operations teams to identify and implement corrective measures
  • Develop reports that reflect vulnerability management program effectiveness and efficiency and perform targeted historical analysis; review historical trending data and recommend improvement opportunities
  • Partner with engineering and automation teams to identify opportunities to automate common vulnerability management analysis and remediation functions
  • Work with Security Architecture and technology stakeholders to inform the development secure configuration standards

The ideal candidate will have a background in information security disciplines and vulnerability management; previous operational systems administration experience is strongly preferred. He or she will have broad knowledge of infrastructure, operating system, and application technologies, an ability to quickly perform in-depth analysis across diverse technologies implemented in a complex environment. He or she should be familiar with writing and publishing information security advisories and formal risk assessments. Basic Qualifications
  • Minimum 5 years of practical technology experience with some experience in information security discipline.
  • Must have knowledge of and experience applying information security components, principles, practices, and procedures
  • Demonstrated experience in systems administration, application infrastructure support and middleware operation
  • Some experience with SQL languages (SQL, T-SQL) with advanced analytic SQL functions skills on the Microsoft SQL Server database platform
  • Proven knowledge of core Internet and networking protocols (DNS, DHCP, TCP/IP, ARP, HTTP, HTTP/S, SSH) and IP communication is required.
  • Proven knowledge of data center infrastructure technologies is required: Windows and Linux operating systems, clustering technology, data storage solutions, middleware technology, and monitoring technologies.
  • Excellent communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams
  • Ability to investigate and analyze complex scenarios and solve problems in innovative ways
  • Passionate about using data to solve pressing and/or difficult questions
  • Ability to work effectively in a cross-functional and highly collaborative environment; shares responsibility well and is flexible in work assignments.
  • Ability to manage multiple priorities and work effectively in a fast-paced, high volume, results driven environment. Ability to rapidly assess a situation and identify, isolate and communicate problems and issues
  • Able to engage individuals and teams to evangelize processes, provide guidance constructively and in the context of the business need.
  • Able to produce and review process and procedural documentation, including knowledge base articles, workflows, and overview presentations, all with great attention to detail.
  • Superior judgment, problem resolution, team building, negotiation, and decision-making skills as well as the ability to work under continual deadline pressure.
  • Applies skills as a seasoned experienced professional with a full understanding of industry practices and company policies and procedures. Resolves a wide range of issues in imaginative and as well as practical ways.
  • Able to remain productive despite ambiguity; uses professional concepts and company objectives to resolve complex issues creatively and effectively.
  • Able to scope tasks, technical requirements and estimate timelines independently for medium-to-large size projects.
  • One or more Information Security certifications (e.g. CISSP or GIAC)
Preferred Qualifications
  • Demonstrates some proficiency in one or more programming language, i.e., ASP.NET, C#, PHP, Python
  • Some experience working with DevOps methodologies
  • ITIL Foundations certification
Required Education
  • BA/BS in information technology, computer science, computer engineering or equivalent work experience.
Company Overview At Corporate, you’ll team with the best in the business to build one of the most innovative global businesses in any industry. Uniquely positioned at the center of an exciting, multi-faceted Company, the forward-thinkers at Disney Corporate constantly pursue new ideas and technologies to help the Company’s many businesses drive value, all the while gaining something valuable from the experience themselves. Come see the most interesting Company from the most interesting point of view. Additional Information
  • This position is a legal entity of The Walt Disney Company, an equal opportunity employer.


See description

Job type
Seattle, WA, United States
Starting in
As soon as possible
Duration of the contract

Other suggested jobs

{{:: 'Junior Sous Chef' | ellipsis : 40 : true }}

{{:: 'HRC International' | ellipsis : 35 : true }}

{{:: 'Sous Chef' | ellipsis : 40 : true }}

{{:: 'HRC International' | ellipsis : 35 : true }}
Interested in this opportunity ?
Other jobs
Android Developer
Seattle, WA, United States
Senior Financial Analyst
Burbank, CA, United States
View 1476 other offers