6 jobs found

Role Location: This is an on-site role requiring 4 days in-person at designated office location. Disney Entertainment and ESPN Product & Technology Technology is at the heart of Disney's past, present, and future. Disney Entertainment and ESPN Product & Technology is a global organization of engineers, product developers, designers, technologists, data scientists, and more - all working to build and advance the technological backbone for Disney's media business globally. The team marries technology with creativity to build world-class products, enhance storytelling, and drive velocity, innovation, and scalability for our businesses. We are Storytellers and Innovators. Creators and Builders. Entertainers and Engineers. We work with every part of The Walt Disney Company's media portfolio to advance the technological foundation and consumer media touch points serving millions of people around the world. Here are a few reasons why we think you'd love working here: Building the future of Disney's media: Our Technologists are designing and building the products and platforms that will power our media, advertising, and distribution businesses for years to come. Reach, Scale & Impact: More than ever, Disney's technology and products serve as a signature doorway for fans' connections with the company's brands and stories. Disney+. Hulu. ESPN. ABC. ABC News and many more. These products and brands - and the unmatched stories, storytellers, and events they carry - matter to millions of people globally. Innovation: We develop and implement groundbreaking products and techniques that shape industry norms and solve complex and distinctive technical problems. Job Summary: The Production Platform Foundations team is a horizontal service team providing both tools and guidance across the organization for operations in AWS. We strive to act as a productivity multiplier, providing consulting and operational support to Application teams to help them drive their adoption of AWS services in conjunction with their existing infrastructure. We work closely with those groups to offer a 'cloud-native' perspective on application architecture, infrastructure, and deployment strategies. A Senior Software Engineer on the Cloud Account Management (CAM) team is a security-focused cloud engineer responsible for designing, building, and supporting automation and tooling initiatives that further enable secure, compliant, self-service ways of working for both the team and the developer base. In addition, this role will provide operational and technical guidance to Application Development (DevOps) teams that are utilizing the AWS environment at Disney Streaming. This position will report to the Engineering Manager and will interact with other Software Engineers in the Cloud Account Management (CAM) team What you'll be doing Write automation tools for your team and other internal teams to self-service, deploy, detect, alert, and mitigate in our AWS environments Build on AWS, including hands-on work with IAM, security policies, and cloud-native services Champion and execute best practices and security standards for operating in the cloud Troubleshoot and implement appropriate IAM permissions for user access and workloads running in AWS Provide guidance and recommendations to development teams on service design and deployments Own initiatives and contribute to future solution designs and planning Be a go-to technical resource on the team, spanning across levels and cross functional teams Monitor and work on inbound issues Qualifications: 5+ years of professional software engineering experience, or equivalent practical experience Strong Python development skills, you write production-quality code, not just scripts Experience with deployment and CI/CD tools - Terraform, GitHub Actions, Spinnaker, and Jenkins. Experience with platform engineering, primarily backend development using Python Experience developing APIs and designing database schemas Hands-on AWS Security/IAM administration and policy-creation experience for many users and workloads Familiarity with Docker and containerization concepts Experience with Unix/Linux systems Exhibit clear, succinct written and verbal communication with technical and non-technical stakeholders. Taking a practical, collaborative approach when working with engineers. Familiarity with operational troubleshooting tools and techniques Nice to have, but not required Experience leveraging AI as a productivity multiplier AWS Certifications Experience supporting DevOps teams in mid-to-large-sized organizations, especially in multitenant environments Familiarity with SSL Certificate management Familiarity with general and AWS-specific networking concepts, including VPC constructs, Firewalling, and DNS The hiring range for this position in Santa Monica, CA and Glendale, CA is $141,900 to $190,300 per year and in New York, NY and Seattle, WA is $148,700 to $199,400 per year and in San Francisco, CA is $155,400 to $208,400. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

Role Location: This is an on-site role requiring 4 days in-person at designated office location. Disney Entertainment and ESPN Product & Technology Technology is at the heart of Disney's past, present, and future. Disney Entertainment and ESPN Product & Technology is a global organization of engineers, product developers, designers, technologists, data scientists, and more - all working to build and advance the technological backbone for Disney's media business globally. The team marries technology with creativity to build world-class products, enhance storytelling, and drive velocity, innovation, and scalability for our businesses. We are Storytellers and Innovators. Creators and Builders. Entertainers and Engineers. We work with every part of The Walt Disney Company's media portfolio to advance the technological foundation and consumer media touch points serving millions of people around the world. Here are a few reasons why we think you'd love working here: Building the future of Disney's media: Our Technologists are designing and building the products and platforms that will power our media, advertising, and distribution businesses for years to come. Reach, Scale & Impact: More than ever, Disney's technology and products serve as a signature doorway for fans' connections with the company's brands and stories. Disney+. Hulu. ESPN. ABC. ABC News and many more. These products and brands - and the unmatched stories, storytellers, and events they carry - matter to millions of people globally. Innovation: We develop and implement groundbreaking products and techniques that shape industry norms and solve complex and distinctive technical problems. Job Summary: The Production Platform Foundations team is a horizontal service team providing both tools and guidance across the organization for operations in AWS. We strive to act as a productivity multiplier, providing consulting and operational support to Application teams to help them drive their adoption of AWS services in conjunction with their existing infrastructure. We work closely with those groups to offer a 'cloud-native' perspective on application architecture, infrastructure, and deployment strategies. A Senior Software Engineer on the Cloud Account Management (CAM) team is a security-focused cloud engineer responsible for designing, building, and supporting automation and tooling initiatives that further enable secure, compliant, self-service ways of working for both the team and the developer base. In addition, this role will provide operational and technical guidance to Application Development (DevOps) teams that are utilizing the AWS environment at Disney Streaming. This position will report to the Engineering Manager and will interact with other Software Engineers in the Cloud Account Management (CAM) team What you'll be doing Write automation tools for your team and other internal teams to self-service, deploy, detect, alert, and mitigate in our AWS environments Build on AWS, including hands-on work with IAM, security policies, and cloud-native services Champion and execute best practices and security standards for operating in the cloud Troubleshoot and implement appropriate IAM permissions for user access and workloads running in AWS Provide guidance and recommendations to development teams on service design and deployments Own initiatives and contribute to future solution designs and planning Be a go-to technical resource on the team, spanning across levels and cross functional teams Monitor and work on inbound issues Qualifications: 5+ years of professional software engineering experience, or equivalent practical experience Strong Python development skills, you write production-quality code, not just scripts Experience with deployment and CI/CD tools - Terraform, GitHub Actions, Spinnaker, and Jenkins. Experience with platform engineering, primarily backend development using Python Experience developing APIs and designing database schemas Hands-on AWS Security/IAM administration and policy-creation experience for many users and workloads Familiarity with Docker and containerization concepts Experience with Unix/Linux systems Exhibit clear, succinct written and verbal communication with technical and non-technical stakeholders. Taking a practical, collaborative approach when working with engineers. Familiarity with operational troubleshooting tools and techniques Nice to have, but not required Experience leveraging AI as a productivity multiplier AWS Certifications Experience supporting DevOps teams in mid-to-large-sized organizations, especially in multitenant environments Familiarity with SSL Certificate management Familiarity with general and AWS-specific networking concepts, including VPC constructs, Firewalling, and DNS The hiring range for this position in Santa Monica, CA and Glendale, CA is $141,900 to $190,300 per year and in New York, NY and Seattle, WA is $148,700 to $199,400 per year and in San Francisco, CA is $155,400 to $208,400. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

Role Location: This is an on-site role requiring 4 days in-person at designated office location. Disney Entertainment and ESPN Product & Technology Technology is at the heart of Disney's past, present, and future. Disney Entertainment and ESPN Product & Technology is a global organization of engineers, product developers, designers, technologists, data scientists, and more - all working to build and advance the technological backbone for Disney's media business globally. The team marries technology with creativity to build world-class products, enhance storytelling, and drive velocity, innovation, and scalability for our businesses. We are Storytellers and Innovators. Creators and Builders. Entertainers and Engineers. We work with every part of The Walt Disney Company's media portfolio to advance the technological foundation and consumer media touch points serving millions of people around the world. Here are a few reasons why we think you'd love working here: Building the future of Disney's media: Our Technologists are designing and building the products and platforms that will power our media, advertising, and distribution businesses for years to come. Reach, Scale & Impact: More than ever, Disney's technology and products serve as a signature doorway for fans' connections with the company's brands and stories. Disney+. Hulu. ESPN. ABC. ABC News and many more. These products and brands - and the unmatched stories, storytellers, and events they carry - matter to millions of people globally. Innovation: We develop and implement groundbreaking products and techniques that shape industry norms and solve complex and distinctive technical problems. Job Summary: The Production Platform Foundations team is a horizontal service team providing both tools and guidance across the organization for operations in AWS. We strive to act as a productivity multiplier, providing consulting and operational support to Application teams to help them drive their adoption of AWS services in conjunction with their existing infrastructure. We work closely with those groups to offer a 'cloud-native' perspective on application architecture, infrastructure, and deployment strategies. A Senior Software Engineer on the Cloud Account Management (CAM) team is a security-focused cloud engineer responsible for designing, building, and supporting automation and tooling initiatives that further enable secure, compliant, self-service ways of working for both the team and the developer base. In addition, this role will provide operational and technical guidance to Application Development (DevOps) teams that are utilizing the AWS environment at Disney Streaming. This position will report to the Engineering Manager and will interact with other Software Engineers in the Cloud Account Management (CAM) team What you'll be doing Write automation tools for your team and other internal teams to self-service, deploy, detect, alert, and mitigate in our AWS environments Build on AWS, including hands-on work with IAM, security policies, and cloud-native services Champion and execute best practices and security standards for operating in the cloud Troubleshoot and implement appropriate IAM permissions for user access and workloads running in AWS Provide guidance and recommendations to development teams on service design and deployments Own initiatives and contribute to future solution designs and planning Be a go-to technical resource on the team, spanning across levels and cross functional teams Monitor and work on inbound issues Qualifications: 5+ years of professional software engineering experience, or equivalent practical experience Strong Python development skills, you write production-quality code, not just scripts Experience with deployment and CI/CD tools - Terraform, GitHub Actions, Spinnaker, and Jenkins. Experience with platform engineering, primarily backend development using Python Experience developing APIs and designing database schemas Hands-on AWS Security/IAM administration and policy-creation experience for many users and workloads Familiarity with Docker and containerization concepts Experience with Unix/Linux systems Exhibit clear, succinct written and verbal communication with technical and non-technical stakeholders. Taking a practical, collaborative approach when working with engineers. Familiarity with operational troubleshooting tools and techniques Nice to have, but not required Experience leveraging AI as a productivity multiplier AWS Certifications Experience supporting DevOps teams in mid-to-large-sized organizations, especially in multitenant environments Familiarity with SSL Certificate management Familiarity with general and AWS-specific networking concepts, including VPC constructs, Firewalling, and DNS The hiring range for this position in Santa Monica, CA and Glendale, CA is $141,900 to $190,300 per year and in New York, NY and Seattle, WA is $148,700 to $199,400 per year and in San Francisco, CA is $155,400 to $208,400. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

EBMUD Job Title: Senior Information Technology Engineer, IT Security (IT/OT Firewall Administration) Salary Info: $157,488 - $191,424 Annually, Plus Excellent Benefits + Retirement Opens online at on Monday, July 27, 2026 Online applications must be received by 4:30 p.m., Friday, August 14, 2026 The East Bay Municipal Utility District's (EBMUD) Information Systems Department is currently seeking a Senior Information Technology Engineer with deep experience administering firewalls in mission-critical, highly available enterprise environments. The role focuses on securing both internal and perimeter networks, supporting business continuity and strengthening cyber resilience across business networks (IT) and operational technology networks (OT) and the implementation and oversight of cybersecurity policies, standards, and best practices. Applicants must reside within commuting distance of EBMUD's Oakland, CA Administration building. This is a hybrid position which requires office presence in accordance with EBMUD's telecommuting guidelines (minimum 2-day per week physical office presence currently required but is subject to change). Telecommuting policies are subject to change. EBMUD will not provide relocation assistance. We are seeking candidates with advanced IT/OT security experience and skills. Experience is desired in three or more of the following disciplines: At least five years of hands-on experience administering firewalls in enterprise-scale, high-availability production environments, including policy management, troubleshooting, and rule lifecycle maintenance. Experience with enterprise-grade firewalls: e.g. Palo Alto Networks, Cisco, FortiNet, Checkpoint. Expertise in troubleshooting network issues. Solid understanding of TCP/IP protocols. Experience configuring, supporting and managing routing- BGP, OSPF, EIGRP, static. Experience with analyzing firewall logs and packet captures. Experience managing virtual firewalls in AWS, Azure and/or GCP. Understanding of IAAS concepts. Experience implementing and supporting ssl-inspection in a production environment. Experience managing VPN's: IPSEC site to site and end user remote access. Experience working with firewall policies, implementing changes, testing changes, submitting changes through change control processes. Experience with automating firewall rule analysis or change workflows using scripts or APIs is a plus. And the ability to: Create and maintain network diagrams and documentation for new and existing firewall deployments- depicting logical and physical environments. Communicate complex topics to non-technical users. Ability and willingness to share knowledge and information with others. Create documentation detailing implementation steps, tracking changes. Work across teams to investigate and respond to incidents. Lead or participate in IT/OT security projects by creating project plans and technical requirements. Track and report on incident handling and response metrics. Participate in annual tabletop cyber incident response exercises. Establish and maintain positive working relationships; teamwork attitude. Balance project deliverables among day-to-day operational demands. Perform independent research and share knowledge effectively. Maintain calm and focus during emergency operations. Work in a hybrid work environment. The most competitive candidates for the Senior IT Security Engineer position will possess strong working knowledge of firewall administration in a highly available production environment; networking experience; threat intelligence; experience in critical infrastructure-including ICS/OT firewall management; and project management principles and practices and cybersecurity best practices. Your experience will include demonstrated success working in many of the following areas: Experience managing firewall changes including: NAT, routing, VPN, access policies, troubleshooting, deployment, upgrades. Experience reviewing, analyzing and responding to firewall alerts: security and operational. Ability to perform and analyze network captures utilizing wireshark. Experience working within a ticketing system to track requests, changes, approvals Experience participating in Blue/Red team exercises. Log and systems analysis, troubleshooting, documentation techniques and procedures. Change control concepts and procedures supporting a production environment. Knowledge of network based attack methods and defense: DDOS, C2, data exfiltration, brute-force attacks, OWASP, etc. Familiarity with Industrial Control Systems (ICS) and Operational Technology (OT) environments is a plus. Project management. The salary range is $13,124 per month increasing to $13,780, $14,469, $15,192, and $15,952 after 6, 18, 30, and 42 months, respectively. EBMUD is an Equal Opportunity Employer. All qualified candidates will receive consideration for employment without regard to race, color, religious creed, sex, gender, gender identity, gender expression, marital or registered domestic partnership status, age for individuals over forty years of age, national origin, ancestry, disability (mental or physical, including AIDS and HIV), medical condition (cancer and genetic characteristics), genetic information, sexual orientation, military and veterans status, family or medical leave status, pregnancy, pregnancy disability leave status, or any other status protected by federal, state and/or local laws. Requirements: 1. A bachelor's degree; and 2. Two years of experience in information technology engineering, one year of which was at a level comparable to or higher than the EBMUD class of Information Technology (IT) Engineer II. 3. Willingness to participate in a rotating on-call schedule to support 24/7 network security operations, including incident response and critical issue resolution. 4. Overtime will be required on an as needed basis. Working environment is indoors and may require sitting for prolonged periods of time and repetitive hand motions. Additional years of experience (beyond the minimum requirement) may be substituted for the education on a year for year basis, only if the experience is at the level of the job for which the applicant is applying. (i.e., Four additional years of experience, at the level of the Senior IT Engineer classification, will be considered equivalent to a bachelor's degree). A graduate level degree in a directly related field may be substituted for one year of experience. To be considered under the "equivalent combination of education and experience" provision, it is your responsibility to include in your application materials written evidence of employment performed at the level of the typical duties of this position and/or coursework in subject areas directly related to this position. For more information, see our FAQ page at Submit a completed EBMUD application and the required supplemental questions responses online at by 4:30 p.m., Friday, August 14, 2026. Only application materials submitted online during the filing period will be accepted. EBMUD is an Equal Opportunity Employer: Females/Minorities/Veterans/Disability Job Hotline:

Tech Summary The IS Consultant IV, Application Security position is a senior hands-on technical role responsible for leading complex application security assessments and advancing secure software development practices across the organization. The consultant will conduct secure code reviews, static and dynamic application security testing, open source component analysis, API and mobile application security assessments, threat modeling, security architecture reviews, vulnerability validation, and remediation guidance. The ideal candidate has advanced software development and application security experience using Java, Python, JavaScript, .NET, Swift, or similar technologies. The candidate should have practical experience with application security testing solutions, penetration testing tools such as Burp Suite or OWASP ZAP, and integrating security controls into CI/CD pipelines. This role requires the ability to independently lead complex assessments, define secure development standards and guardrails, evaluate third party applications, and influence architecture and engineering decisions. The consultant will collaborate with developers, architects, product owners, vendors, security leaders, and executive stakeholders to communicate technical risk clearly and provide actionable remediation recommendations. Experience with cloud native applications, APIs, mobile applications, AI enabled applications, DevSecOps automation, and healthcare or other regulated environments is preferred. Job Summary: In addition to responsibilities listed below, this position is responsible for reviewing application source code for potential security vulnerabilities by performing manual and automated security testing on applications in a running state (DAST); working with DevOps teams to integrate application security services; training DevOps personnel and developers to use application security tools; working one-on-one with developers to help them understand security vulnerabilities at hand and to identify/suggest remediation plans; and recommending application security training paths. This also includes responsibility for protecting applications in production by enrolling them for continuous assessment of existing and emerging threats, evaluating web application firewalls; tuning WAF rules; reviewing alerts; and identifying issues as appropriate. Essential Responsibilities: Completes work assignments and supports business-specific projects by applying expertise in subject area; supporting the development of work plans to meet business priorities and deadlines; ensuring team follows all procedures and policies; coordinating and assigning resources to accomplish priorities and deadlines; collaborating cross-functionally to make effective business decisions; solving complex problems; escalating high priority issues or risks, as appropriate; and recognizing and capitalizing on improvement opportunities. Practices self-development and promotes learning in others by proactively providing information, resources, advice, and expertise with coworkers and customers; building relationships with cross-functional stakeholders; influencing others through technical explanations and examples; adapting to competing demands and new responsibilities; listening and responding to, seeking, and addressing performance feedback; providing feedback to others and managers; creating and executing plans to capitalize on strengths and develop weaknesses; supporting team collaboration; and adapting to and learning from change, difficulties, and feedback. Effectively communicates investigative findings to non-technical audiences. Collaborates with technology risk teams and business stakeholders to respond to and remediate identified issues, and determine the best approach for improving security posture. Provides recommendations to management and business stakeholders on how to remediate issues identified through security testing processes. Identifies the impact of security test plans on upstream and downstream solution components. Supports information sharing and integration procedures across cyber security through the exchange of threat intelligence and cyber security vulnerability assessment data. Contributes to cyber security intellectual capital by making process or procedure improvements, conducting brown bag training sessions, and creating new training documents. Follows established processes to ensure KPI goals are obtained and performance metrics are tracked on an ongoing basis. Recommends business line or business technology team security process improvements which align with sustainable best practices, and the strategic and tactical goals of the business. Supports continuous process improvement by participating in the development, implementation, and maintenance of standardized security tools, templates, and processes across multiple business domains. Performs complex security test data analysis in support of security vulnerability assessment processes, including root cause analysis. Serves as an escalation point on issues, dependencies, and risks related to security testing. Executes the vulnerability assessment and penetration testing plan, methodologies, and standard processes for moderately to highly complex technology initiatives across multiple IT domains by analyzing business and technology requirements. Researches and stays abreast of industry trends, emerging threats, best practices, and cutting edge techniques to creatively discover and exploit vulnerabilities, and recommend security solutions for technology systems. Provides insight and consultation on the development of testing scope and approach, and collaborates with cross-functional IT and business stakeholders to review the overall testing approach. Validates security test scenarios across various SDLC phases (e.g., development, reproduction, production) for low- to moderately-complex projects. Generates scheduled reports (e.g., status updates, risk assessment reports, remediation reports) and provides regular security metrics to IT teams and management as appropriate. Minimum Qualifications: Minimum three (3) years software or application development experience. Minimum one (1) year experience in application security (e.g., source code analysis, dynamic analysis, etc.). Bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum six (6) years experience in IT or a related field, including Minimum two (2) years in information security, network engineering, or application development. Additional equivalent work experience may be substituted for the degree requirement. Additional Requirements:

Tech Summary: The IS Consultant III, Application Security position is a hands-on technical role responsible for supporting application security assessments and secure software development practices under the guidance of senior application security consultants. The role performs source code reviews, manual and automated security testing, vulnerability assessments, and security test data analysis for moderately complex technology initiatives. The consultant works with developers, DevOps teams, technology risk teams, and business stakeholders to integrate application security services, validate security findings, provide remediation guidance, and communicate risks to technical and nontechnical audiences. The role also supports continuous application assessment, security tool adoption, standardized security processes, metrics, reporting, and ongoing improvements across assigned business domains. Job Summary: In addition to responsibilities listed below, this position is responsible for reviewing application source code for potential security vulnerabilities under the guidance of more senior application security consultants by performing manual and automated security testing on applications in a running state (DAST); working with DevOps teams to integrate application security services; training DevOps personnel and developers to use application security tools; working one-on-one with developers to help them understand security vulnerabilities at hand and to identify/suggest remediation plans; and recommending application security training paths. This also includes responsibility for protecting applications in production by enrolling them for continuous assessment of existing and emerging threats, evaluating web application firewalls; tuning WAF rules; reviewing alerts; and identifying issues as appropriate. Essential Responsibilities: Completes work assignments by applying up-to-date knowledge in subject area to meet deadlines; following procedures and policies, and applying data and resources to support projects or initiatives; collaborating with others, often cross-functionally, to solve business problems; supporting the completion of priorities, deadlines, and expectations; communicating progress and information; identifying and recommending ways to address improvement opportunities when possible; and escalating issues or risks as appropriate. Pursues self-development and effective relationships with others by sharing resources, information, and knowledge with coworkers and customers; listening, responding to, and seeking performance feedback; acknowledging strengths and weaknesses; assessing and responding to the needs of others; and adapting to and learning from change, difficulties, and feedback. Effectively communicates investigative findings to non-technical audiences. Works with technology risk teams and business stakeholders to respond to and remediate identified issues, and determine the best approach for improving security posture. Provides recommendations to team or department leadership on how to remediate issues identified through security testing processes. Identifies the impact of security test plans on upstream and downstream solution components. Follows established processes to ensure KPI goals are obtained and performance metrics are tracked on an ongoing basis. Supports continuous process improvement by participating in the development, implementation, and maintenance of standardized security tools, templates, and processes across assigned business domain(s). Performs security test data analysis in support of security vulnerability assessment processes, including root cause analysis. Executes the vulnerability assessment and penetration testing plan, methodologies, and standard processes for moderately complex technology initiatives across multiple IT domains by analyzing business and technology requirements. Researches and stays abreast of industry trends, emerging threats, best practices, and cutting edge techniques to creatively discover and exploit vulnerabilities, and recommend security solutions for technology systems. Generates scheduled reports (e.g., status updates, risk assessment reports, remediation reports) and provides regular security metrics to IT teams as appropriate. Minimum Qualifications: Minimum two (2) years software or application development experience. Bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum three (3) years experience in IT or a related field, including Minimum one (1) year in information security, network engineering, or application development. Additional equivalent work experience may be substituted for the degree requirement. Additional Requirements: N/A