Infrastructure Security Engineer

Company Description
NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our global theme park destinations, consumer products, and experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through our powerhouse film and television studios, including Universal Pictures, DreamWorks Animation, and Focus Features, and the four global television studios under the Universal Studio Group banner, and operate industry-leading theme parks and experiences around the world through Universal Destinations & Experiences, including Universal Orlando Resort, home to Universal Epic Universe, and Universal Studios Hollywood. NBCUniversal is a subsidiary of Comcast Corporation. Visit www.nbcuniversal.com for more information.
Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.
Job Description
Join NBCUniversal Cyber Security and be at the forefront of implementing, supporting, and evolving our infrastructure security platforms and services.
This role is a part of the Infrastructure Security Engineering team responsible for the security technology that supports the entire NBCUniversal enterprise. You'll be responsible for both supporting and engineering infrastructure security services that provide visibility and defend the enterprise at all layers.
You'll:

• Provide secure design and engineering guidance, support, and fulfill new business requests for security tools and services, including Endpoint, WAF, DNS, Email and Layer 7 firewalls.
• Improve and innovate tooling utilized to manage security rule sets, ensuring that policies reflect the risk reduction goals of the organization.
• Participate in and oversee the On-call rotation to provide off-hours support for critical systems, ensuring seamless incident response and mentoring junior staff on best practices.
• Develop and implement automation strategies to streamline and simplify security policy administration, increasing efficiency and reducing human error.
• Collaborate with cross-functional teams to integrate security protections into existing tools and environments, ensuring a holistic approach to security.
• Leverage data using various sources and advanced analytics to create clear metrics and reports, providing insights into the performance and security posture of the enterprise.

Qualifications
Qualifications

• 2+ years of experience managing and troubleshooting Network Firewalls, Endpoint security and DNS security.
• Solid understanding of network security principles and how to apply them.
• Excellent problem-solving and troubleshooting skills with the ability to use various data collection tools and methodologies to analyze problems, determine root cause, and develop solutions.
• Knowledge/hands-on experience with Cloudflare, Akamai or a similar web application firewall solutions.
• A thirst for improvement and an inclination to thoughtfully challenge the status quo.
• Desire to try things and iterate on them, fail fast, and focus on functionality that matters.
• Ability to work independently, adapt quickly, and have a positive attitude.

Bonus points for:

• Experience with CrowdStrike, Tanium, Airlock, or similar endpoint protection products.
• Experience with development technologies: Git (Bitbucket or GitHub), Terraform, Ansible or AWS Lambda.
• Experience with Email Authentication including ProofPoint and implementing of policies for SPF, DMARC, and DKIM.
• Experience with Palo Alto Networks firewalls, highly segmented and transient networks, or extreme high-performance network environments such as broadcast or research networks.
• Experience with project management/workflow tools and concepts such as Jira, Agile, Scrum/Kanban.
• Comfortable with scripting or software development.

Additional Requirements:
Fully Remote: This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee's residence.
This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. Salary range: $80,000 - $100,000
We are accepting applications for this position on an ongoing basis.
Additional Information
As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.
If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing [email protected].
For LA County and City Residents Only: NBCUniversal will consider for employment qualified applicants with criminal histories, or arrest or conviction records, in a manner consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.