Security Engineer - Security Architecture and Engineering

Security Engineer - Security Architecture and Engineering

Department

Description:

At Disney, we’re storytellers. We make the impossible, possible. The Walt Disney Company (TWDC) is a world-class entertainment and technological leader. Walt’s passion was to continually envision new ways to move audiences around the world—a passion that remains our touchstone in an enterprise that spans theme parks and resorts, a cruise line, sports, news, movies, and a variety of other businesses.

Uniting each endeavor is a commitment to creating and delivering unforgettable experiences — and we’re constantly looking for new ways to enhance these exciting experiences.

The Enterprise Technology mission is to deliver technology solutions that align with business strategies, enable enterprise efficiency, and promote cross-company collaborative innovation. Our group drives competitive advantage by enhancing our consumer experiences, enabling business growth, and advancing operational excellence.

The Global Information Security (GIS) organization strives to secure the magic by employing best-in-class services to assess, prevent, detect, and respond to cyber threats that present risk to The Walt Disney Company. We enable the business by integrating enterprise and business segment‑specific supported services to create a robust, efficient, and adaptable cybersecurity program. Our key objectives are to:

• Secure the magic by protecting information systems and platforms.
• Reduce risk by proactively assessing, preventing, and detecting threats to the Company and our Guests.
• Strengthen the business through optimizing execution, application, and technology used to protect the Company.
• Innovate by investing in core capabilities to enhance security posture and operational efficiency.

Team

Description:

The GIS Security Architecture and Engineering team is Disney’s trusted authority in security architecture, solution engineering, and secure product delivery. We provide innovative, standards-based capabilities and exceptional services that evolve with our clients’ needs—ensuring protection, agility, and peace of mind across the enterprise. We empower transformational innovation by designing and implementing scalable security architectures and frameworks that enhance resiliency, enable agility, and safeguard Disney’s global technology ecosystem.

Our work protects the integrity of Disney’s storytelling, experiences, and operations—reducing risk, enabling agility, and ensuring resilience in a rapidly evolving threat landscape.

What You’ll Do:

The Security Engineer – Architecture & Engineering will:

• Design and drive secure architecture solutions that protect Disney’s global technology ecosystem, developing reference architectures and patterns that scale across applications, cloud platforms, and enterprise services.
• Lead and influence secure design decisions by partnering with engineers, architects, and business stakeholders to embed security early in the solution lifecycle using secure‑by‑design and secure‑by‑default principles.
• Evaluate emerging cybersecurity technologies through Disney’s Security Solution Review Process, conducting deep technical assessments and shaping enterprise adoption strategies for next‑generation capabilities.
• Assess and secure AI/ML implementations across the enterprise, performing risk‑based evaluations to identify threats such as model manipulation, data leakage, and adversarial attacks, and recommending practical mitigation strategies.
• Conduct advanced threat modeling and architecture risk assessments, leveraging internal incident data and external threat intelligence to proactively identify gaps and strengthen enterprise defenses.
• Identify capability gaps in existing security architectures and design forward‑looking solutions that address evolving threats, including Zero Trust Architecture, cloud‑native security, and distributed system protection.
• Develop and maintain enterprise security configuration standards, establishing secure baselines that enable consistent, scalable protection across infrastructure, platforms, and applications.
• Translate complex cybersecurity risks into clear, actionable guidance, enabling business…