Sr Content Security Engineer

Senior Content Security Engineer

The Walt Disney Studios is a leader in the industry that brings memorable, life-changing stories to the world through Disney Motion Picture Productions (MPP), Marvel Studios, Pixar, Walt Disney Animation Studios, 20th Century Studios, Searchlight Pictures, and Lucasfilm. The incredible movies, shows, and characters that have come to life on the big screen and in our homes are thoroughly embedded in minds and cultures across the globe. From the Marvel Cinematic Universe, reinvented live action classics, multi-film franchises, and Oscar winning films, the studios have redefined movie and series making by building a universe filled with creativity, innovation, and collaboration. At The Walt Disney Studios, you will be part of a team that helps propel our legacy into the future with a vision as far-reaching as our characters, worlds, and stories.

The Content Security organization is focused on protecting the magic – we ensure that all film and episodic content is protected and does not leak. We do this by employing the best practices from the world of Cyber Security, technology and a deep understanding of the world of media and entertainment creative workflows.

We are looking for a Senior Content Security Engineer – an experienced technical contributor who brings a thoughtful approach to solving complex challenges and a deep sense of ownership over protecting Disney's creative ecosystem. The ideal candidate will have a strong background in application or cloud security, with the ability to lead reviews, influence secure design decisions, and partner across engineering and production teams. In this role, you'll help strengthen the foundations of our content protection practices while staying agile and adaptable in a fast-moving studio environment. It's an opportunity to deliver meaningful technical leadership and secure technologies that power the stories that move audiences around the world.

Given this broad range of responsibility, the successful candidate can deal with ambiguity, provide clarity where none exists and be able to step into and navigate a complex and high-paced environment of hardworking, friendly, and passionate people. The ideal candidate is a problem-solver and collaborator at heart, someone who brings clarity to complex challenges, takes initiative, and communicates with empathy and precision. They are confident yet humble, able to both lead and support depending on what the moment calls for, and deeply invested in protecting the people, platforms, and stories that power The Walt Disney Studios.

Responsibilities:

• Lead application and infrastructure security reviews for content management, editorial, and production platforms.
• Conduct security assessments and provide actionable recommendations for internal tools and third-party vendor solutions.
• Serve as a technical partner for production technologists, platform owners, and engineering teams.
• Investigate incidents and findings with appropriate follow-up documentation and recommendations.
• Integrate secure-by-design principles into new workflows, including remote collaboration and cloud-based editing.
• Assist with the creation and maintenance of baseline configurations and hardening guidelines.
• Develop automation or tooling scripts to support repetitive assessments or checks.
• Present security risks and solutions to technical and non-technical stakeholders.
• Maintain awareness of threats targeting the entertainment sector and content workflows.
• Contribute to cross-functional initiatives including privacy, DRM, watermarking, and AI-based content usage reviews.

Basic Qualifications:

• Bachelor's degree in a technical field; certifications like Security+, AWS SAA, or GCP ACE are a plus.
• Must have at least 5 years of experience in cybersecurity roles, with emphasis on application, cloud, or infrastructure security.
• Must have proven ability to conduct security assessments and deliver clear, actionable guidelines & results to technical and non-technical teams.
• Must have strong understanding of cloud security services across AWS, GCP, or Azure, including IAM, networking, and compute.
• Experience securing CI/CD pipelines, APIs, and containerized environments.
• Familiarity with security use cases in Media & Entertainment, such as editorial, transfer, and content collaboration workflows.
• Strong problem-solving and sense of ownership in seeing security improvements through.
• Ability to thrive in a creative, high-velocity environment with evolving technologies.
• Excellent communication and documentation skills.

The ideal profile would include combination of someone with the following experience (must have):

• Product security
• Security engineering
• Pentest
• Redteam/ Tiger Team/Blue team
• Cloud security engineering
• Security software engineer