Security Operations Analyst

Job Description

On any given day at Disney Entertainment & ESPN Technology, we're reimagining ways to create magical viewing experiences for the world's most beloved stories while also transforming our media business for the future. Whether that's evolving our streaming and digital products in new and immersive ways, powering worldwide advertising and distribution to enhance flexibility and efficiency, or delivering Disney's unmatched entertainment and sports content, every day is a moment to make a difference to partners and to hundreds of millions of people around the world.

A few reasons why we think you'd love working here:
• Building the future of Disney's media: DE&E Technologists are designing and building the infrastructure that will power our media, advertising, and distribution businesses for years to come.
• Reach & Scale: The products and platforms this group builds and operates delight millions of consumers every minute of every day – from Disney+ and Hulu, to ABC News and Entertainment, to ESPN and ESPN+, and much more.
• Innovation: We develop and implement groundbreaking products and techniques that shape industry norms and enhance how audiences experience sports, entertainment & news.

Content Operations is ultimately responsible for successfully delivering entertainment and sports content to millions of people every day. This involves developing, operating, and leading a global content supply chain – the myriad of steps involved from taking a finalized TV show/movie, or live piece of content, from inside Disney to audiences around the globe, in their preferred language and format. This team also leads technology operations in Latin America, Europe and Asia Pacific.

Responsibilities

As the Security Operations Analyst II, you will be challenged to blend new technologies with our content protection policies to ensure that TWDC content remains secure and protected across all post-theatrical windows. Your responsibilities include independent evaluations of software, hardware and services related to media distribution, documenting and effectively communicating the results of these evaluations as well as any impacts to the underlying technology strategy, maintaining hardware, software and related equipment for use by the Content Protection team, and researching and reverse engineering new technologies in media security, distribution and consumer devices.
• Assists with content security reviews for domestic and international distribution deals
• Perform VPN effectiveness testing and geofiltering analysis
• Performs hands-on evaluation of specifically identified technologies – emerging technologies (4K, HDR, etc.), distribution technologies (P2P, OTT, etc.), consumer technologies (STBs, Game Consoles, software,) etc.;
• Identifies emerging platforms, technologies, and consumption devices
• Research new media security, distribution and consumer technologies and understand/articulate known vulnerabilities as well as potential impact(s) to Disney's content protection policies
• Communicates status to stakeholders and management
• Supports business units to gather and ensure completion of Technical Questionnaires
• Assists with technical and security reviews of content delivery platforms in Distribution Deals
• Assists in enforcement of Content Protection policies on Distribution Deals
• Maintains a repository for technologies that have been evaluated and their status
• Participates in security reviews, threat modeling, and incident response investigations;
• Designs and maintains test cases, scripts and custom test tools for evaluations
• Stay abreast of trends, products, frameworks, applications, and threat landscapes

Basic Qualification
• Bachelor's degree in relevant field of study or equivalent work experience
• 3+ years experience with meaningful information security research, software and/or hardware interrogation, and familiarity with content distribution via the internet;
• 3+ years programming in Object Oriented (OO) environment (Java, C++, etc.);
• 3+ years experience in Information Security, Software/Hardware Engineering, Computer Science, Security Research
• Demonstrated experience with security research tools
• Skilled understanding and ability to interact with fuzzing, compiling, and analyzing tools, programs, and techniques.
• Proven experience with network analysis tools (e.g. Wireshark, Charles Proxy, etc.);
• Knowledge of video distribution systems (OTT, Cable, Satellite, IPTV, etc.);
• Demonstrated understanding of DRM systems such as Google Widevine, Apple FairPlay, and Microsoft PlayReady, etc.
• Strong understanding of mobile operating systems and security environments (iOS/Android);
• Informed understanding of network protocols, data delivery and security principles (PKI, RSA, etc.);
• Effectively communicate across all levels of the organization
• Ability to communicate effectively with technical and non-technical partners
• Demonstrated understanding of Internet based delivery mechanisms for video such as CMAF, HLS, MPEG-DASH, etc
• Proficient understanding of Web Services
• Proficient understanding of the Software Development Life Cycle
• Proficient in quality assurance testing techniques

Preferred Qualifications
• 2+ years in any of the following areas - security engineering, application security, reverse-engineering, and/or mobile security;
• Working understanding of technologies like DLNA, MoCA
• Working understanding of security protocols like DTCP-IP, HDCP, UPnP, TLS
• Demonstrated understanding of distribution platforms such as Cable, IPTV, Satellite, Mobile and Internet
• Demonstrated understanding of watermarking and fingerprinting technologies

The hiring range for this position in Burbank, CA is $93,400.00 to $125,200.00 per year. The base pay actually offered will take into account internal equity and also may vary depending on the candidate's geographic region, job-related knowledge, skills, and experience among other factors. A bonus and/or long-term incentive units may be provided as part of the compensation package, in addition to the full range of medical, financial, and/or other benefits, dependent on the level and position offered.

About Disney Entertainment & ESPN Technology:

Disney Entertainment and ESPN Technology (DE&E Technology) provides the technological backbone and product development for Disney's two media business units, while helping to keep the company at the vanguard of innovation – enabling the Company to continuously leverage technology to enhance storytelling and creativity, while delivering scalability, flexibility, and efficiency for its businesses.

This position is with Disney Streaming Technology LLC, which is part of a business we call Disney Entertainment & ESPN Technology.

Disney Streaming Technology LLC is an equal opportunity employer. Applicants will receive consideration for employment without regard to race, color, religion, sex, age, national origin, sexual orientation, gender identity, disability, protected veteran status or any other basis prohibited by federal, state or local law. Disney fosters a business culture where ideas and decisions from all people help us grow, innovate, create the best stories and be relevant in a rapidly changing world.

Jobcode: Reference SBJ-d8x09q-3-144-81-47-42 in your application.