Base Salary
$125k - $155k/yr
Responsibilities
- Conduct end-to-end security and threat analysis for enterprise initiatives involving new or modified technology deployments.
- Architect and deliver cyber solutions and ensure security best practices are incorporated into system designs.
- Provide technical subject matter expertise across network, application, cloud, and enterprise security controls.
- Develop security guidance and mitigation requirements in partnership with cybersecurity, IT, and business stakeholders.
- Explain common threats across network, cloud, web, and application environments.
- Develop and document security guidelines and best practices.
- Communicate cybersecurity programs and services to technical and non-technical audiences to gain business support.
- Mentor team members and manage multiple concurrent projects.
Requirements
- At least 8 years of experience partnering with business and technical teams to architect and deliver cyber solutions.
- At least 8 years of experience consulting with business teams on threat mitigation best practices in one or more cybersecurity technical areas.
- Advanced technical knowledge in at least one cybersecurity area, such as perimeter security, application security, core systems, EDR, or cloud security.
- Knowledge of OWASP Top 10 and CWE/SANS Top 25.
- Experience developing and documenting security guidelines or best practices.
- Experience using diagramming tools to communicate secure designs and controls.
- Strong written, verbal, communication, and presentation skills for technical and non-technical audiences.
- Desired experience with threat analysis and modeling using MITRE ATT&CK.
- Familiarity with Cloud Security Matrix, NIST CSF, and CIS Critical Security Controls.
- Understanding of PCI DSS, SOX, HIPAA, GDPR, and CCPA.
- In-depth knowledge of IaaS, PaaS, and SaaS cloud services.
- Understanding of cybersecurity engineering and operations, incident response, and GRC functions.
- A formal degree is not required; relevant experience in the listed cybersecurity areas is prioritized.
Benefits
- Fully remote position with work performed from a non-NBCUniversal worksite, most commonly the employee’s residence.
- Company-sponsored medical, dental, and vision insurance.
- 401(k), paid leave, tuition reimbursement, discounts, and other perks.
- Bonus eligible.
- External candidates may be required to attend an in-person interview before a hiring decision.
Categories
About NBC
NBCUniversal is one of the world’s leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our global theme park destinations, consumer products, and experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, DreamWorks Animation, and Focus Features, and the four global television studios under the Universal Studio Group banner, and operate industry-leading theme parks and experiences around the world through Universal Destinations & Experiences, including Universal Orlando Resort, home to Universal Epic Universe, and Universal Studios Hollywood. NBCUniversal is a subsidiary of Comcast Corporation. Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.