Senior Software Engineer

Senior Software Engineer Location: Los Angeles, CA (also Seattle, WA and other locations) Team Description Global Information Security (GIS) supports all of Disney’s business segments, including Disney Entertainment & ESPN. DE&E encompasses the operations of Disney’s streaming services—Disney+, Hulu, and ESPN+—as well as Disney’s broadcast and cable networks. SECURITY professionals supporting DE&E work with industry-leading technologies to deliver world‑class, highly secure services to customers. Responsibilities Design and develop internal cybersecurity tools and services to support compliance and risk modeling functions. Build and maintain integrations between legacy, in‑house, and cloud‑based systems using APIs and SDKs. Implement and manage IaC frameworks to automate security configuration and auditing workflows. Collaborate with compliance teams to translate audit and control requirements (SOX, PCI, etc.) into code‑based solutions and enhancements in existing applications. Contribute to data ingestion and analytics pipelines that improve visibility across cloud and on‑prem environments. Develop AI/ML models to assist with automated risk categorization, configuration detection, or control validation. Work with DevOps and Security Engineering to maintain consistent RBAC, IAM, and policy enforcement across multi‑cloud and Kubernetes environments. Build, document, and maintain runbooks specific to internal APIs, service architecture, and developed frameworks. Stay up to date on cybersecurity trends, industry standards (ISO, NIST, CIS), and regulatory requirements. Provide mentorship and technical guidance to engineers and analysts, ensuring secure design and operational excellence. Must Haves Minimum of 5+ years of experience in software development. Experience with modern security tooling, DevSecOps, and AI/ML in cybersecurity. AWS: IAM, RBAC modeling, API and SDK‑based resource discovery, Systems Manager (SSM). Git & GitHub: version control, branching strategies, and CI/CD pipelines. Linux: security models, permissions, and bash scripting. SQL: relational data modeling, queries, and integration with back‑end systems. Programming Languages: Python, C#, and/or Ruby. Infrastructure as Code: Terraform. Databases: user permission models for MSSQL, MySQL, PostgreSQL, Couchbase, and MemSQL. Operating Environments: on‑premises, cloud, and Kubernetes‑based systems. Identity Systems: Active Directory, LDAP, Okta; user lifecycle management and directory integrations. Configuration & Deployment Tools: Helm and Salt. Security Frameworks: developing control‑based automation and integrating security telemetry into compliance and risk modeling functions. Nice to Haves Experience with Scala and/or Golang. Deep understanding of cybersecurity principles and best practices. Strong problem‑solving and debugging skills in complex distributed environments. Ability to translate security and compliance requirements into technical solutions. Excellent collaboration and communication skills with cross‑functional teams. Strong sense of ownership and accountability for secure, maintainable code. Relevant security certifications such as OSCP, ISC2 CISSP, AWS Certified Security – Specialty, SANS, CEH, etc. are a major plus. Education Bachelor’s degree in Computer Science, Information Systems, Software, Electronics Engineering, or comparable field of study, and/or equivalent work experience. Compensation The hiring range for this position in Los Angeles, CA is $141,900 to $190,300 per year and in Seattle, WA is $148,700 to $199,400 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long‑term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered. #J-18808-Ljbffr