Application/Information Security Consultant (with Software Developement Experience in past)

The Global Information Security (GIS) group provides services and solutions to protect the value and use of Disney’s information through risk evaluation, collaboration, standardization, enforcement, and education across the enterprise. We protect the brand and reputation while enabling and supporting business objectives. GIS teams are located in Seattle, Burbank, and Orlando. Build, own, and operate enterprise service(s) in support of the program.• Perform activities such as threat modeling, secure code reviews, security testing and vulnerability triage across various DMED applications.• Provide security guidance to application and service owners to remediate known security vulnerabilities.• Design, build and deploy automation to scale the discovery and management of security vulnerabilities across all DMED applications and platforms.• Improve upon and further integrate the Secure Development Lifecycle (SDLC) into product design and engineering efforts.• Analyze our security posture, identify gaps, and work closely with cross functional teams to implement controls and ensure strong operational security.• Develop security metrics delivery and improvements.• Evaluate and recommend new security testing tools. Additional Information: Locations: Candidates will need to reside near offices in Northern and Southern California, greater NY, Bristol, CT, Orlando, Florida, Seattle, Washington, and TexasProduct Security, enabling development product teams to build secure applications-Assisting with setting up tooling for teams to scan applications-Metrics, reportingTop Skills:1) Strong software engineering background-development of applications2) Web mobile, API3) Strong security knowledge, consulting background ideal4) Partnering with development teams5) WAF-Web application firewall experience is a huge plus6) Strong communication skills7) Knowledge of source GETLAB, GETHub8) Strong cohesive team