Job Posting Title:
Senior Software Engineer
Req ID:
Job Description:
Our objectives are:
- Secure the Magic by protecting information systems and platforms within TWDC
- Reduce Risk by proactively assess, prevent, and detect to prevent harm to TWDC and our guests
- Enable the business through optimizing execution, application, and technology used to protect TWDC
- Innovate! We strive to strategically invest in building core capabilities to advance operational efficacy
Team Description: Global Information Security (GIS) supports all of Disney's business segments, including Disney Entertainment & ESPN (DE&E). DE&E encompasses the operations of Disney's streaming services-Disney+, Hulu, and ESPN+ -as well as Disney's broadcast and cable networks, including ABC, ESPN, FX, Disney Channels, and National Geographic. DE&E sits at the intersection of entertainment, sports, and technology, striving to connect viewers with beloved stories while advancing the streaming industry with consumer-first innovations. Security professionals supporting DE&E work with industry-leading technologies to deliver world-class, highly secure services to customers.
Responsibilities of Role: We are seeking a Sr Software Engineer to design, build, and maintain internal applications and integrations that enhance the organization's core cybersecurity operations. This role bridges security engineering and software development, focusing on automating compliance, improving risk visibility, and accelerating security workflows through infrastructure-as-code and AI-driven modeling. This role will work closely with compliance analysts, infrastructure teams, and service owners across the enterprise to develop secure, scalable solutions supporting continuous compliance, risk modeling, and operational visibility.
- Design and develop internal cybersecurity tools and services to support compliance, visibility and risk modeling functions.
- Build and maintain integrations between legacy, in-house, and cloud-based systems using APIs and SDKs.
- Implement and manage IaC frameworks to automate security configuration and auditing workflows.
- Collaborate with compliance teams to translate audit and control requirements (SOX, PCI, etc.) into code-based solutions and enhancements in existing applications.
- Contribute to data ingestion and analytics pipelines that improve visibility across cloud and on-prem environments.
- Develop AI/ML models to assist with automated risk categorization, configuration detection, or control validation.
- Work with DevOps and Security Engineering to maintain consistent RBAC, IAM, and policy enforcement across multi-cloud and Kubernetes environments.
- Build, document, and maintain runbooks specific to internal APIs, service architecture, and developed frameworks.
- Stay up to date on cybersecurity trends, industry standards (ISO, NIST, CIS), and regulatory requirements.
- Provide mentorship and technical guidance to engineers and analysts, ensuring secure design and operational excellence.
Must Haves: - Minimum of 5+ years of experience in software development
- Experience with modern security tooling, DevSecOps, and AI/ML in cybersecurity
- AWS: IAM, RBAC modeling, API and SDK-based resource discovery, Systems Manager (SSM)
- Git & GitHub: version control, branching strategies, and CI/CD pipelines
- Linux: security models, permissions, and bash scripting
- SQL: relational data modeling, queries, and integration with back-end systems
- Programming Languages: Python, C#, and/or Ruby
- Infrastructure as Code: Terraform
- Databases: user permission models for MSSQL, MySQL, PostgreSQL, Couchbase, and MemSQL
- Operating Environments: on-premises, cloud, and Kubernetes-based systems
- Identity Systems: Active Directory, LDAP, Okta; user lifecycle management and directory integrations
- Configuration & Deployment Tools: Helm and Salt
- Security Frameworks: developing control-based automation and integrating security telemetry into compliance and risk modeling functions
Nice to Haves: - Experience with Scala and/or Golang
- Deep understanding of cybersecurity principles and best practices
- Strong problem-solving and debugging skills in complex distributed environments
- Ability to translate security and compliance requirements into technical solutions
- Excellent collaboration and communication skills with cross-functional teams
- Strong sense of ownership and accountability for secure, maintainable code
- Relevant security certifications such as OSCP, ISC2 CISSP, AWS Certified Security - Specialty, SANS, CEH, etc. are a major plus.
Education: - Bachelor's degree in Computer Science, Information Systems, Software, Electronics Engineering, or comparable field of study, and/or equivalent work experience
#DISNEYTECH
The hiring range for this position in Los Angeles, CA is $141,900 to $190,300 per year and in Seattle, WA is $148,700 to $199,400 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.
Job Posting Segment:
Enterprise Technology
Job Posting Primary Business:
Corporate Global Information Security
Primary Job Posting Category:
Software Engineer
Employment Type:
Full time
Primary City, State, Region, Postal Code:
Orlando, FL, USA
Alternate City, State, Region, Postal Code:
USA - CA - 2500 Broadway Street, USA - CA - 820 S Flower St, USA - WA - 925 4th Ave
Date Posted:
2025-11-10
