JOB SUMMARY:
The Lead Engineer Cyber Security provides strategic direction for Universal Destinations & Experiences (UDX) in support of Universals Digital and Technology Division. This role partners with other cyber security team members and UDX stakeholders to support the secure design development and deployment of solutions by understanding the technical aspects of the business problems and technical guidance across many different technology stacks and platforms. As a member of the Cyber Security Assurance team the Lead Engineer functions as a strategic thought leader and subject matter expert for cyber security. This includes helping to identify gaps in capabilities evaluating new tools and working with senior leadership to define strategy.
MAJOR RESPONSIBILITIES:
- Support UDX in securely designing implementing and deploying systems; validate designs as requested by the business; ensure the UDX network is secure.
- Solve complex technical and integration issues with creative and secure solutions.
- Participate in creating and defining security practices for UDX networks using an intelligence and threat-driven defense model.
- Identify and communicate key risks and security posture to senior leadership; build effective relationships across UDX business units; mentor junior security engineers and architects; build and contribute to communities of excellence as appropriate.
- Lead initiatives to ensure the technology vision is realized.
- Collaborate with other cyber security teams to define and document multi-year security technology vision and roadmap.
- Understands and actively participates in Environmental Health & Safety responsibilities by following established UO policy procedures training and team member involvement activities.
- Performs other duties as assigned.
EDUCATION:
- Bachelors degree in Computer Sciences Information Systems or Cyber Security required.
- Masters degree preferred; or combined applicable work experience.
EXPERIENCE:
- 7 years of demonstrated experience working in a technical area as part of a large team required (Software Engineering Computer Engineering DevSecOps Infrastructure Networking Cyber Security Architecture).
- Experience in large-scale networks routing protocols and network security components
- Hands-on experience configuring and managing Cloudflare Akamai F5 or Azure Web Application firewalls with a deep understanding of their capabilities and best practices
- Experience developing and implementing application security DDoS Bot Protection and other Cloud Edge Security services across an enterprise
- Experience/knowledge on managing and troubleshooting on DNS DHCP & IPAM (DDI) protocols and security (DNS and DHCP concepts IPAM IP addressing VLANs). Infoblox experience a plus
- Proficiency with development technologies: Git (Bitbucket or GitHub) Terraform Ansible
- Payment Card Industry Data Security Standard (PCI DSS) experience is preferred.
- Extensive knowledge and experience working with applicable data security compliance and privacy legal and regulatory frameworks preferred.
- Ability to produce high quality technical documentation
- Experience performing Threat Analysis and modeling leveraging best in industry frameworks such as MITRE ATT&CK indicating proficiency in implementing robust security measures
- Empathy for engineering teams with the ability to balance security guidelines and policies with operational needs to maintain desired end-state corporate security posture;
- or equivalent combination of education and experience.
ADDITIONAL INFORMATION:
- This position is based in Orlando Florida and may require travel to other NBCUniversal parks and properties on occasion. Regular on-call rotation duty is expected.
- Project deadlines/business needs may require additional time outside of normal business hours
- Flexible and adaptable to learning and understanding new technologies
- Strong written oral communication and interpersonal skills; highly collaborative; personally and professionally self-aware; ability to and interested in interacting with individuals at all levels of the organization
- Highly self-motivated and directed
- Keen attention to detail
- Proven analytical and problem-solving abilities
- Ability to effectively prioritize and execute tasks in a high-pressure environment
- Strong sense of urgency and commitment as well as sound business sense with a strategic conceptual and operational orientation.
- Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
- Consistent attendance is a job requirement.
Your talent skills and experience will be rewarded with a competitive compensation package.
Universal Orlando Resort. Here you can.
Required Experience:
Senior IC
JOB SUMMARY:The Lead Engineer Cyber Security provides strategic direction for Universal Destinations & Experiences (UDX) in support of Universals Digital and Technology Division. This role partners with other cyber security team members and UDX stakeholders to support the secure design development a...
JOB SUMMARY:
The Lead Engineer Cyber Security provides strategic direction for Universal Destinations & Experiences (UDX) in support of Universals Digital and Technology Division. This role partners with other cyber security team members and UDX stakeholders to support the secure design development and deployment of solutions by understanding the technical aspects of the business problems and technical guidance across many different technology stacks and platforms. As a member of the Cyber Security Assurance team the Lead Engineer functions as a strategic thought leader and subject matter expert for cyber security. This includes helping to identify gaps in capabilities evaluating new tools and working with senior leadership to define strategy.
MAJOR RESPONSIBILITIES:
- Support UDX in securely designing implementing and deploying systems; validate designs as requested by the business; ensure the UDX network is secure.
- Solve complex technical and integration issues with creative and secure solutions.
- Participate in creating and defining security practices for UDX networks using an intelligence and threat-driven defense model.
- Identify and communicate key risks and security posture to senior leadership; build effective relationships across UDX business units; mentor junior security engineers and architects; build and contribute to communities of excellence as appropriate.
- Lead initiatives to ensure the technology vision is realized.
- Collaborate with other cyber security teams to define and document multi-year security technology vision and roadmap.
- Understands and actively participates in Environmental Health & Safety responsibilities by following established UO policy procedures training and team member involvement activities.
- Performs other duties as assigned.
EDUCATION:
- Bachelors degree in Computer Sciences Information Systems or Cyber Security required.
- Masters degree preferred; or combined applicable work experience.
EXPERIENCE:
- 7 years of demonstrated experience working in a technical area as part of a large team required (Software Engineering Computer Engineering DevSecOps Infrastructure Networking Cyber Security Architecture).
- Experience in large-scale networks routing protocols and network security components
- Hands-on experience configuring and managing Cloudflare Akamai F5 or Azure Web Application firewalls with a deep understanding of their capabilities and best practices
- Experience developing and implementing application security DDoS Bot Protection and other Cloud Edge Security services across an enterprise
- Experience/knowledge on managing and troubleshooting on DNS DHCP & IPAM (DDI) protocols and security (DNS and DHCP concepts IPAM IP addressing VLANs). Infoblox experience a plus
- Proficiency with development technologies: Git (Bitbucket or GitHub) Terraform Ansible
- Payment Card Industry Data Security Standard (PCI DSS) experience is preferred.
- Extensive knowledge and experience working with applicable data security compliance and privacy legal and regulatory frameworks preferred.
- Ability to produce high quality technical documentation
- Experience performing Threat Analysis and modeling leveraging best in industry frameworks such as MITRE ATT&CK indicating proficiency in implementing robust security measures
- Empathy for engineering teams with the ability to balance security guidelines and policies with operational needs to maintain desired end-state corporate security posture;
- or equivalent combination of education and experience.
ADDITIONAL INFORMATION:
- This position is based in Orlando Florida and may require travel to other NBCUniversal parks and properties on occasion. Regular on-call rotation duty is expected.
- Project deadlines/business needs may require additional time outside of normal business hours
- Flexible and adaptable to learning and understanding new technologies
- Strong written oral communication and interpersonal skills; highly collaborative; personally and professionally self-aware; ability to and interested in interacting with individuals at all levels of the organization
- Highly self-motivated and directed
- Keen attention to detail
- Proven analytical and problem-solving abilities
- Ability to effectively prioritize and execute tasks in a high-pressure environment
- Strong sense of urgency and commitment as well as sound business sense with a strategic conceptual and operational orientation.
- Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
- Consistent attendance is a job requirement.
Your talent skills and experience will be rewarded with a competitive compensation package.
Universal Orlando Resort. Here you can.
Required Experience:
Senior IC
View more
View less