2 months ago
Base Salary
$125k - $155k/yr
Responsibilities
- Conduct end-to-end security and threat analysis for enterprise initiatives involving new or modified technology deployments.
- Architect and deliver cyber solutions and ensure security best practices are incorporated into system designs.
- Provide technical subject matter expertise across network, application, cloud, and enterprise security controls.
- Develop security guidance and mitigation requirements in partnership with cybersecurity, IT, and business stakeholders.
- Explain common threats across network, cloud, web, and application environments.
- Develop and document security guidelines and best practices.
- Communicate cybersecurity programs and services to technical and non-technical audiences to gain business support.
- Mentor team members and manage multiple concurrent projects.
Requirements
- At least 8 years of experience partnering with business and technical teams to architect and deliver cyber solutions.
- At least 8 years of experience consulting with business teams on threat mitigation best practices in one or more cybersecurity technical areas.
- Advanced technical knowledge in at least one cybersecurity area, such as perimeter security, application security, core systems, EDR, or cloud security.
- Knowledge of OWASP Top 10 and CWE/SANS Top 25.
- Experience developing and documenting security guidelines or best practices.
- Experience using diagramming tools to communicate secure designs and controls.
- Strong written, verbal, communication, and presentation skills for technical and non-technical audiences.
- Desired experience with threat analysis and modeling using MITRE ATT&CK.
- Familiarity with Cloud Security Matrix, NIST CSF, and CIS Critical Security Controls.
- Understanding of PCI DSS, SOX, HIPAA, GDPR, and CCPA.
- In-depth knowledge of IaaS, PaaS, and SaaS cloud services.
- Understanding of cybersecurity engineering and operations, incident response, and GRC functions.
- A formal degree is not required; relevant experience in the listed cybersecurity areas is prioritized.
Benefits
- Fully remote position with work performed from a non-NBCUniversal worksite, most commonly the employee’s residence.
- Company-sponsored medical, dental, and vision insurance.
- 401(k), paid leave, tuition reimbursement, discounts, and other perks.
- Bonus eligible.
- External candidates may be required to attend an in-person interview before a hiring decision.
Categories
About NBC
NBCUniversal is a global media and entertainment company that produces and distributes film, television, news, sports, and streaming content for consumer audiences and advertisers. Its portfolio includes NBC, Telemundo, Universal Pictures, DreamWorks Animation, and Peacock, and it also operates Universal theme parks and consumer products licensing. Formed in 2004 and headquartered in New York City, it is a subsidiary of Comcast.