Skip to content

CareerBoard

Advertise your job!
 

New York, New York - USD Full Time Posted: Monday, 19 June 2017
 
 
Job Description

Marvel Entertainment is hiring an experienced Security Engineer/Developer to join our Infrastructure & Operations team. In this role, you'll report to the Director of Architecture & Security and will work across a variety of security functions supporting the internet-facing aspects of Marvel's successful online businesses. The ideal candidate will be either a talented security engineer who has learned Back End web development frameworks and tools or a seasoned Back End developer who has strong skills and experience in security.

As part of Marvel Entertainment's Infrastructure & Operations team, you will be charged with maintaining and improving our security profile for thousands of sites and services involved in delivering engaging and robust user experiences.

We are looking for a passionate and experienced software engineer who thinks logically, acts rationally and understands the challenges of supporting current and emerging technology stacks that enable Marvel to continue to grow our universe of characters and the multi-media, multi-lingual, multi-platform infrastructure on which they reside.

This is an on-site position in Marvel's NYC office. Candidates must be legally permitted to work in the United States. No recruiter-submitted candidates.

Employment Type

Full Time

Job Posting Company

Marvel

Basic Qualifications

. 3+ years hands-on experience with server-side web and MVC development

. 3+ years hands-on experience with SOAP, REST and XML-RPC web services

. 2+ years of hands-on experience in a security role

. Solid understanding of networking, storage and sysadmin best practices

. Demonstrated experience securing high-traffic properties (cloud and on-prem)

. Strong sense of ownership and execution-oriented activity

. Ability to juggle and prioritize multiple projects and meet deadlines

. Critical thinking skills with a high attention to detail when assessing severity and impact of security issues

. Expert at web application firewalls and web server security configurations

. Knowledge of web inspect, fortify and other security testing tools

Required Education

Bachelor's degree required, security certifications not required so long as you are qualified.

Preferred Qualifications

. Familiarity with open source and commercial security testing and QA tools

. Deep understanding of security protocols, exploits and mitigating technologies

. Track record of delivering hardened, fault-tolerant, high-availability designs

. Experience with ansible, chef or puppet

. Cool-headed in a crisis and instill confidence in those around you while solving problems

. Lazy enough to automate tasks, smart enough to document them well (L7 diagrams)

. Deep understanding of OWASP best practices and static code analysis

. Knowledge of Federation technologies including SAML, OAUTH, OpenID connect

Primary Location-Postal Code

10020

Responsibilities

. Work alongside a talented team of colleagues and quintessentially creative individuals who are building next-generation mobile, web and Back End applications and services

. Development and implementation of web and mobile applications using PHP, Java and MVC frameworks in a Linux-based environment

. Writing clean, fast PHP to a high standard, in a timely and scalable way. Experienced with ZendPHP and Laravel

. Bring security considerations and requirements to product design and implementation for award-winning digital comics subscription products used by millions of fans

. Assess the fit for new and emerging technologies and design patterns from a security perspective that maintains a high degree of awesome

. Work with traditional software development lifecycle methodologies as well as newer agile-based approaches to design, code, peer review and troubleshoot services delivering millions of digital assets

. Participate/lead regular security reviews for deployments, pen-testing of the environment and vulnerability remediation

Job Posting Industries

Digital/Interactive

Company Overview

Marvel Entertainment, LLC, a wholly-owned subsidiary of The Walt Disney Company, is one of the world's most prominent character-based entertainment companies, built on a proven library of over 8,000 characters featured in a variety of media over seventy years. Marvel utilizes its character franchises in entertainment, licensing and publishing.

Job Description

Marvel Entertainment is hiring an experienced Security Engineer/Developer to join our Infrastructure & Operations team. In this role, you'll report to the Director of Architecture & Security and will work across a variety of security functions supporting the internet-facing aspects of Marvel's successful online businesses. The ideal candidate will be either a talented security engineer who has learned Back End web development frameworks and tools or a seasoned Back End developer who has strong skills and experience in security.

As part of Marvel Entertainment's Infrastructure & Operations team, you will be charged with maintaining and improving our security profile for thousands of sites and services involved in delivering engaging and robust user experiences.

We are looking for a passionate and experienced software engineer who thinks logically, acts rationally and understands the challenges of supporting current and emerging technology stacks that enable Marvel to continue to grow our universe of characters and the multi-media, multi-lingual, multi-platform infrastructure on which they reside.

This is an on-site position in Marvel's NYC office. Candidates must be legally permitted to work in the United States. No recruiter-submitted candidates.

Employment Type

Full Time

Basic Qualifications

. 3+ years hands-on experience with server-side web and MVC development

. 3+ years hands-on experience with SOAP, REST and XML-RPC web services

. 2+ years of hands-on experience in a security role

. Solid understanding of networking, storage and sysadmin best practices

. Demonstrated experience securing high-traffic properties (cloud and on-prem)

. Strong sense of ownership and execution-oriented activity

. Ability to juggle and prioritize multiple projects and meet deadlines

. Critical thinking skills with a high attention to detail when assessing severity and impact of security issues

. Expert at web application firewalls and web server security configurations

. Knowledge of web inspect, fortify and other security testing tools

Required Education

Bachelor's degree required, security certifications not required so long as you are qualified.

Preferred Qualifications

. Familiarity with open source and commercial security testing and QA tools

. Deep understanding of security protocols, exploits and mitigating technologies

. Track record of delivering hardened, fault-tolerant, high-availability designs

. Experience with ansible, chef or puppet

. Cool-headed in a crisis and instill confidence in those around you while solving problems

. Lazy enough to automate tasks, smart enough to document them well (L7 diagrams)

. Deep understanding of OWASP best practices and static code analysis

. Knowledge of Federation technologies including SAML, OAUTH, OpenID connect

Responsibilities

. Work alongside a talented team of colleagues and quintessentially creative individuals who are building next-generation mobile, web and Back End applications and services

. Development and implementation of web and mobile applications using PHP, Java and MVC frameworks in a Linux-based environment

. Writing clean, fast PHP to a high standard, in a timely and scalable way. Experienced with ZendPHP and Laravel

. Bring security considerations and requirements to product design and implementation for award-winning digital comics subscription products used by millions of fans

. Assess the fit for new and emerging technologies and design patterns from a security perspective that maintains a high degree of awesome

. Work with traditional software development lifecycle methodologies as well as newer agile-based approaches to design, code, peer review and troubleshoot services delivering millions of digital assets

. Participate/lead regular security reviews for deployments, pen-testing of the environment and vulnerability remediation

Posted by StartWire



New York, New York, United States of America
Engineering
USD
Disney
Disney
JS2124_083D8963F92DE8AF5832047EAE88F415_228_I/228152602
6/19/2017 11:44:58 AM

We strongly recommend that you should never provide your bank account details to an advertiser during the job application process. Should you receive a request of this nature please contact support giving the advertiser's name and job reference.