Full-Time Platform Security Engineer (DevOps)
NBCUniversal is hiring a remote Full-Time Platform Security Engineer (DevOps). The career level for this job opening is Experienced and is accepting Orlando, FL based applicants remotely. Read complete job description before applying.
NBCUniversal
Job Title
Posted
Career Level
Career Level
Locations Accepted
Share
Job Details
As a Platform Security Engineer, you'll play a pivotal role in securing the engineering ecosystem by developing capabilities, services, and automation balancing speed, scalability, and compliance.
You'll lead the DevSecOps roadmap, shaping the future of secure cloud infrastructure and empowering teams to innovate with confidence.
This hands-on role emphasizes AWS security, CI/CD security, and security automation, empowering teams to deliver secure software at scale and quickly remediate issues.
Lead Security Efforts on the Platform: Drive and deliver security solutions across AWS cloud, container security (ECS/Kubernetes), CI/CD, and secure cloud-native architectures ensuring compliance with standards such as PCI-DSS, ISO27001, SOC 2, NIST 800-53, and COPPA.
Enhance Secure CI/CD: Build and enhance security-related platform capabilities, involving CI/CD pipelines, infrastructure, reusable templates, and automation, enabling teams to deploy rapidly and securely at scale.
Standardize Secure Patterns: Design and implement reusable patterns that promote security best practices and compliance across all engineering teams.
Advance Secure Software Delivery: Promote secure delivery practices embedding security in the build and design phases, emphasizing fast feedback, observability, and operational excellence.
Collaborate Cross-Functionally: Work closely with SecOps, platform teams, and engineering teams fostering knowledge sharing and ensuring alignment on security goals and solutions.
Strengthen Security Posture: Assess and improve existing security standards, practices, and controls to reduce vulnerabilities and enhance the organization’s security posture.
Drive Compliance Automation: Develop automation strategies to enforce regulatory controls and ensure continuous compliance with industry standards.
Support Incident Response: Collaborate on incident monitoring and response, conduct Root Cause Analysis, and recommend measures for future mitigation.
Leverage Key Tools and Skills: Utilize AWS cloud knowledge, Terraform, and Python to develop secure solutions balancing security objectives with developer productivity and business goals.
Communicate Effectively: Deliver clear security updates, document solutions thoroughly, and communicate effectively with diverse stakeholders, including engineering teams and executive leadership.