Platform Security Engineer - NBC Sports Next

As a Platform Security Engineer youll play a pivotal role in securing our engineering ecosystem by developing capabilities services and automation that balance speed scalability and compliance. Youll lead the DevSecOps roadmap shaping the future of secure cloud infrastructure and enabling teams to innovate with confidence. This handson role emphasizes AWS security CI/CD security and security automation empowering our teams to deliver secure software at scale and quickly remediate issues if they arise. If youre passionate about architecting scalable secure cloud solutions and driving security excellence we want to talk to you! This role is remote and may require some travel.

Job Description

• Lead Security Efforts on the Platform: Drive and deliver security solutions across AWS cloud container security (ECS/Kubernetes) CICD and secure cloudnative architectures while ensuring compliance with standards such as PCIDSS ISO27001 SOC 2 NIST 80053 and COPPA.
• Enhance Secure CI/CD: Build and enhance security related platform capabilities involving CI/CD pipelines infrastructure reusable templates and automation enabling teams to deploy rapidly and securely at scale.
• Standardize Secure Patterns: Design and implement reusable patterns that promote security best practices and compliance across all engineering teams.
• Advance Secure Software Delivery: Promote secure delivery practices by embedding security in the build and design phases emphasizing fast feedback observability and operational excellence.
• Collaborate CrossFunctionally: Work closely with SecOps platform teams and engineering teams fostering knowledge sharing and ensuring alignment on security goals and solutions.
• Strengthen Security Posture: Assess and improve existing security standards practices and controls to reduce vulnerabilities and enhance the organizations security posture.
• Drive Compliance Automation: Develop automation strategies to enforce regulatory controls and ensure continuous compliance with industry standards.
• Support Incident Response: Collaborate on incident monitoring and response conduct Root Cause Analysis and recommend measures for future mitigation.
  Leverage Key Tools and Skills: Utilize AWS cloud knowledge Terraform and Python to develop secure solutions that balance security objectives with developer productivity and business goals.
• Communicate Effectively: Deliver clear security updates document solutions thoroughly demo and communicate effectively with diverse stakeholders including engineering teams and executive leadership.

Qualifications :

Required Experience:

• AWS Expertise: 2 years of handson experience with AWS with a strong focus on IAM best practices and securing common AWS resources (e.g. EC2 S3 RDS) in production public facing environments.
• Linux Proficiency: Minimum of 4 years of experience managing and securing Linux systems.
• Security Automation & Tooling: 2 years of experience implementing security automation and integrating security tooling (e.g. SEIM SAST/DAST WIZ/ORCA or other).
• Automation/Scripting: 2 years of experience with Python for automation and scripting in a security/DevSecOps context. Or related development experience.
• Git and GitOps: Practical experience and comfortable using Git and automated workflows for developing code securely.
• Web Security Knowledge: Familiarity with web security best practices including DNS firewalls secure APIs and database security (e.g. PostgreSQL MySQL).
• Cloud Security: Proven ability to secure cloud environments including implementing and managing security controls auditing and monitoring.
• Communication & Collaboration: Exceptional written and verbal communication skills with the ability to explain complex security concepts to technical and nontechnical audiences.
• Track Record of Solutions: Demonstrated ability to identify and address security challenges delivering effective solutions through collaboration and leadership.

Preferred Qualifications:

• Regulated Environments: Experience working in environments with complex compliance requirements (e.g. PCIDSS SOC 2 ISO27001).
• AWS Certifications: Relevant certifications such as AWS Certified Security Specialty or AWS Certified Solutions Architect.
• Web Security & Threat Detection: Handson experience with WAFs (e.g. AWS WAF Cloudflare) and centralized logging stacks (e.g. Splunk Kibana).
• DevSecOps Expertise: Strong understanding of secure CI/CD practices and integrating compliance objectives into pipelines.
• Infrastructure as Code (IaC): Experience with Terraform or CloudFormation for managing secure infrastructure.
• Security Mentorship: Proven ability to mentor engineers and share security knowledge effectively.

Fully Remote: This position has been designated as fully remote meaning that the position is expected to contribute from a nonNBCUniversal worksite most commonly an employees residence.

Additional Information :

As part of our selection process external candidates may be required to attend an inperson interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversals policy is to provide equal employment opportunities to all applicants and employees without regard to race color religion creed gender gender identity or expression age national origin or ancestry citizenship disability sexual orientation marital status pregnancy veteran status membership in the uniformed services genetic information or any other basis protected by applicable law.

If you are a qualified individual with a disability or a disabled veteran and require support throughout the application and/or recruitment process as a result of your disability you have the right to request a reasonable accommodation. You can submit your request to .

For LA County and City Residents Only:  NBCUniversal will consider for employment
qualified applicants with criminal histories or arrest or conviction records in a manner
consistent with relevant legal requirements including the City of Los Angeles Fair Chance
Initiative For Hiring Ordinance the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act where applicable.