Senior Security Engineer, Product Security

Senior Security Engineer, Product Security

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world‑class entertainment and technological leader. Our Enterprise Technology mission is to deliver technology solutions that align to business strategies while enabling enterprise efficiency and promoting cross‑company collaborative innovation.

The Global Information Security (GIS) organization secures the magic by employing best‑in‑class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. It integrates enterprise and business segment‑specific services to create a robust, efficient, and adaptable cybersecurity program.

Team

Description:

The Product Security Team protects guests and the Disney brand by engaging with product development teams throughout the product lifecycle. We assess and influence product design, analyze applications for flaws that may lead to security issues, and provide penetration testing to ensure our products are secure.

• Utilize a pragmatic approach to solve complex security situations with no fully defined solution.
• Influence and collaborate cross‑functionally across the enterprise to address security risks and provide mitigation recommendations within the Software Development Lifecycle (SDLC).
• Perform secure code reviews, security testing, and vulnerability triage across various TWDC applications.
• Lead complex initiatives with internal and external customers on security‑related projects and operational tasks; design, build, and deploy automation to scale the discovery and management of security vulnerabilities across all TWDC applications and platforms.
• Mentor and help develop junior engineering talent.
• Develop security metrics delivery and improvements.

• Minimum of 5+ years of experience in cybersecurity, application security, or related information technology disciplines.
• Programming experience with a language such as Python.
• Experience performing security audits of source code for applications.
• Experience integrating security checks into CI/CD pipelines and leveraging automation to ensure code coverage.
• Proven experience bringing security solutions into production.
• Experience with SBOMs and the security of the software supply chain.
• Strong understanding of security principles and practices and the ability around the trade‑offs of security solutions and approaches.
• Ability to work in a fast‑paced, dynamic environment while navigating complex and sometimes ambiguous situations.

• Experience with security tooling such as SAST, SCA and DAST.
• Mobile application security testing experience.
• Familiarity with cloud security principles and technologies.
• Familiarity and experience with AI use cases and solutions.
• Relevant certifications such as GWAPT, OSWE, Burp Suite Certified Practitioner, CompTIA Security+ are highly desirable.

• Bachelor’s degree in computer science, Information Systems, Software, Electrical or Electronics Engineering, or comparable field of study, and/or equivalent work experience.

The hiring range for this position in Burbank, CA is $129,300 – $173,300 per year. The base pay actually offered will take into account internal equity and may vary depending on the candidate’s geographic region, job‑related knowledge, skills, and experience. A bonus and/or long‑term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and other benefits, dependent on the level and position offered.

The Walt Disney Company and its affiliated companies are Equal Employment Opportunity employers and welcome all job seekers, including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need a reasonable accommodation in order to search for a job opening or apply for a position, visit the Disney candidate disability accommodations FAQs. We will only respond to those requests that are related to the accessibility of the online application system due to a disability.