Senior Staff Security Engineer - Infrastructure + Product Security, Disney+ Hotstar

工作概要:

Key Responsibilities

• Championing security: Educate and train people at all levels of the business to advocate for a security-conscious culture
• An advocate for a policy as a code, security, and automation
• Growing our security tech stack: Maintain our existing tooling and stay on top of emerging technologies that could improve our security posture and drive their evaluation, rollout and adoption
• Promoting security by design: Work closely with the engineering teams to embed security considerations, including vulnerability management, in the design, development, and maintenance of products and features
• Manage internal efforts to successfully end security incidents 
• Build and design toolings to automate security operations without compromising our posture 
• Define and refine measurements of security risk
• Advocate and support engineering teams in developing secure platform toolings and services 
• Mentoring team members to uplevel technical and interpersonal security skills
• You will exert technical influence over Infosec team members, increasing their productivity and effectiveness by sharing your deep knowledge and experience

Skills & Attributes for success

• Extensive knowledge of security risks and mitigations through process and technology, especially for cloud-based applications and infrastructure
• Experienced with securing AWS infrastructure managed and provisioned using IaC
• Architect, design, develop and operationalize high-performance, scalable, reliable, and resilient services
• You have experience working with and securing containers and Kubernetes
• You have a robust knowledge of security engineering and application security
• Strong understanding of web or mobile application security
• Penetration Testing, threat modeling, and architecture review experience
• Strong communication skills to translate security requirements into business objectives and to effectively convey security considerations to both technical and non-technical audiences
•  Confidence to engage with peers, both internally and at prospects/customers, to understand their information security concerns
• You have experience working with a fully distributed, remote team
• Excellent problem-solving abilities
• Sound business judgment, proven ability to influence others and strong analytical thinking skills
• Entrepreneurial spirit and willingness to have fun!

Preferred Education & Experience

• Bachelor's Degree in Computer Science or related field with a minimum 8+ years of experience in securing large scalable systems