Cybersecurity Engineer (Linux DevSecOps Engineer)

Description

The team builds, runs and maintains shared, dependable and extensible security platforms that support the security engineering, security architecture, and threat detection and response groups at the company's global information and content security function.

This role keeps security practices current and makes sure the tools and processes behind a secure platform stay maintained. The ideal person combines security and systems engineering so that business processes are set up correctly and sound security practices are designed and built in.

The company is a global media and entertainment business with three segments: Studios, Direct-to-Consumer, and TV Media.

You will review designs to test security controls, find ways to strengthen the company's security posture, build or manage enterprise security platforms, and explain security goals clearly to leaders at every level.

Responsibilities

• Plan, design, engineer and implement security technologies.
• Understand technical security issues and their impact on business units, and explain them clearly to managers and business leaders.
• Configure, troubleshoot and maintain security infrastructure, including software and hardware, in cloud and on-premises environments.
• Run security audits and assessments on a regular basis to judge how well security platforms work and where they can improve.
• Harden, audit, monitor and log hosts and operating systems using suitable controls and practices that also meet business goals.
• Research emerging security technologies and decide where they fit within the company.
• Write standard operating procedures and protocols, cross-train teammates and mentor them as needed.

Requirements

• 5+ years of hands-on experience building, designing and maintaining enterprise security tools.
• 5+ years of hands-on experience in security engineering.
• 5+ years of successfully implementing advanced cybersecurity technology in a complex environment.
• Experience engineering and administering security platforms such as SIEM and SOAR systems, endpoint detection and response, vulnerability management, anomaly detection and cloud analysis.
• Hands-on technical experience with networking and computing system architectures, focused on their security aspects.
• Must have 5+ experience applying DevSecOps and secure architecture design principles to build security capabilities.
• Must have 5+ years of scripting experience in Python or an equivalent language.
• Solid grasp of information security principles, techniques, policy frameworks and best practices.
• Hands-on experience with public cloud infrastructure such as AWS (Amazon Web Services).
• Hands-on experience with Kubernetes and Helm.
• 3+ years of hands-on experience with automation tools such as Ansible and Terraform.
• Preferred, not required: security and cloud certifications such as CISSP, Splunk Admin and AWS Solutions Architect.
• Preferred, not required: hands-on technical experience with compliance and regulatory frameworks and how they shape architecture design and review.
• Preferred, not required: AI engineering or AI security experience.

Conditions

Hybrid work model: 3 days per week onsite at the Silver Spring, DC, or Atlanta office.

Hiring salary range: $91,000.00 to $169,000.00 per year.

Actual pay depends on factors such as location, external market data, internal equity, skills, experience, training, education and performance.

Equal-opportunity note: qualified candidates with disabilities can request accommodations during the application and recruitment process.

Benefits

• Other possible rewards include annual bonuses, short- and long-term incentives, and program-specific awards.
• Health insurance coverage and an employee wellness program.
• Life and disability insurance.
• A retirement savings plan.
• Paid holidays, sick time and vacation.