Security Engineer - Security Architecture and Engineering

Department Description

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continuously envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that stretches from theme parks, resorts and a cruise line to sports, news, movies and a variety of other businesses.

Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment-specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the Magic by protecting information systems and platforms.
• Reduce Risk by proactively assessing, preventing, and detecting to prevent harm to the Company and our Guests.
• Strengthen the business through optimizing execution, application, and technology used to protect the Company.
• Innovate by investing in core capabilities to enhance operational efficiency.

The GIS Security Architecture and Engineering team is Disney’s trusted authority in security architecture, solution engineering, and secure product delivery. We provide innovative, standards-based capabilities and exceptional service that evolve with our clients’ needs—ensuring protection, agility, and peace of mind across the enterprise. We empower transformational innovation by designing and implementing scalable security architectures and frameworks that enhance resiliency, enable agility, and safeguard Disney’s global technology ecosystem.

Our work protects the integrity of Disney’s storytelling, experiences, and operations—reducing risk, enabling agility, and ensuring resilience in a rapidly evolving threat landscape.

We are hiring a Security Engineer - Security Architecture and Engineering!

• Design, develop, and implement secure solutions and reference architectures that align with business objectives, enterprise standards, and evolving threats.
• Provide situation-based guidance during solution design, leveraging in-depth knowledge of security technologies, policies, and controls to ensure alignment with Disney’s security requirements and industry best practices.
• Translate security requirements into scalable technical controls integrated across systems, applications, and cloud environments.
• Execute advanced risk and threat analysis activities, including threat modeling, architecture risk reviews, and vulnerability assessments.
• Incorporate internal incident trends and external threat intelligence to proactively shape security decisions and architectural guidance.
• Evaluate security posture across platforms and technologies, recommending pragmatic and business-aligned mitigations.
• Create and maintain security architecture artifacts such as reference architectures, control frameworks, design patterns, standards, and policies.
• Support governance through documentation of control mapping, compliance alignment (e.g., NIST, CIS, ISO 27001), and integration into solution development.
• Translate complex security issues into understandable terms and balanced recommendations that consider business context, impact, and feasibility.
• Facilitate security reviews and ensure follow-through on findings, including mitigation planning, exception tracking, and risk acceptance where appropriate.
• Document engineering designs, security findings, risk decisions, and solution status to support…