Lead Security Engineer

“We Power the Magic!” That’s our motto at Disney Experiences (DX). Our team creates world-class immersive digital experiences for the Company’s premier vacation brands including Disney’s Parks & Resorts worldwide, Disney Cruise Line, Aulani, a Disney Resort & Spa, and Disney Vacation Club.

We are responsible for the end-to-end digital and physical Guest experience for all technology & digital-led initiatives across the Attractions & Entertainment, Food & Beverage, Resorts & Transportation and Merchandise lines of business as well as other initiatives including MyDisneyExperience and Hey, Disney!

This role sits in the US Parks & Resorts organization within Disney Experiences Technology and works closely with other site reliability engineers, application delivery teams, and systems engineers from across the company.

The Lead Security Engineer will report to the Manager, Site Reliability Engineering

About The Role & Team:

The US Parks Site Reliability Organization is accountable for the reliability and resilience of a portfolio of critical applications and services. We partner with product, engineering, and SRE teams across the organization to define and evolve reliability standards rooted in SRE and DevOps principles. Rather than simply operating systems, we apply engineering approaches—observability, automation, and data‑driven decision making—to proactively improve service health. By designing reliability into platforms and reducing operational toil, we enable teams to focus on innovation and delivering world‑class guest experiences.

What You'll Do:

• Process and prioritize security assessment reports
• Evaluate designs and request and how well they conform to security controls
• Design and maintain security controls for applications and infrastructure
• Implement WAF and bot management configurations.
• Understand and audit security configurations and standards.
• Enhance security monitoring and detection systems
• Identifying current and emerging technology issues including security trends, vulnerabilities and threats
• Conduct security investigations
• Sourcing and implementing new security solutions to better protect the organization
• Conducting proactive research to analyze security weaknesses and recommend appropriate strategies

Required Qualifications:

• Minimum 7 years of related work experience
• Proficient in agile environments
• Minimum of 5 years of experience with at least one CDN (Akamai, Cloudflair, Fastly, etc)
• Hands-on experience with CI/CD tools like Gitlab, AWS CodeBuild, Azure DevOps
• Proficient in configuration management tools: Terraform, CloudFormation, Ansible, Chef
• Experience in procedural programming languages (Python, Perl, Ruby, Java, Go, Rust, C/C++)
• Skilled in Cloud environments (AWS, Azure, Google Cloud)
• Proven ability to design and build reliable, scalable enterprise systems
• Capable of leading reliability efforts and identifying root causes in large-scale distributed systems
• Demonstrated experience leading technical projects and ensuring smooth delivery
• Strong troubleshooting skills across systems, network, and code
• Proven experience mentoring, guiding, or training other engineers, with strong written and verbal communication and the ability to influence without direct authority
• Proactive demeanor toward continuous learning and mastering emerging tools and methodologies
• Experience with NIST and CIS security benchmarks

Required Education:

• BS degree in Computer Science, Cybersecurity, related software engineering field or equivalent work experience

Preferred Education

• Certification including CISSP, Net+, Security +, or other relevant certifications

The hiring range for this position in Lake Buena Vista, FL is $148,300 - $198,800 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate’s geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.