Full-Time Sr Staff Cyber Security Engineer

We are seeking a Sr. Staff Cyber Security Engineer to join our NBCU Security Engineering team. This role will collaborate with various NBCUniversal businesses, enterprise IT, and the Cyber Security organization to ensure secure technology design and deployment aligned with Cyber Security and enterprise strategies.

Responsibilities include:

• Conducting end-to-end security and threat analysis of enterprise initiatives involving new or modified technology deployments.
• Ensuring Information Security best practices and guidelines are incorporated into system designs.
• Serving as a technical and engineering subject matter expert in network, application, cloud, and enterprise security controls.
• Collaborating with the Cyber organization and business stakeholders to provide security guidance and mitigation requirements.
• Effectively communicating the importance of key Cyber programs and services to gain business support and buy-in.

Basic Requirements:

• 10+ years of experience partnering with business and technical teams to architect and deliver Cyber solutions.
• 10+ years of experience consulting with business teams regarding threat mitigation best practices.
• Ability to explain common threats to network, cloud, web, and application environments.
• Advanced technical knowledge in at least one Cyber security area.
• Ability to work collaboratively to ensure clear Cyber requirements throughout project phases.
• Knowledge of industry best practices (OWASP Top 10, CWE/SANS Top 25).
• Strong written/verbal communication and presentation skills, adaptable for technical and non-technical audiences.
• Experience developing and documenting security requirements, guidelines, or best practices.
• Proficient in using diagramming tools for secure design communication.
• Strong time management skills for prioritizing multiple projects.
• Understanding of balancing security guidelines with operational needs.

Desired Characteristics:

• Experience performing Threat Analysis and modeling using frameworks like MITRE ATT&CK.
• Familiarity with security controls like Cloud Security Matrix, NIST CSF, and CIS Critical Security Controls.
• Understanding of data and privacy regulations (PCI DSS, SOX, HIPAA, GDPR, CCPA).
• In-depth knowledge of common cloud services (IaaS, PaaS, SaaS).
• Understanding of Cybersecurity Engineering/Operations, Incident Response, and GRC functions.
• Security assurance experience with mergers, demergers, and/or acquisitions.
• Ability to evaluate threats and security gaps and assist stakeholders.

Additional Requirements:

• Fully Remote position, contributing from a non-NBCUniversal worksite.
• Eligibility for company-sponsored benefits (medical, dental, vision, 401(k), paid leave, etc.).
• Salary range: $145,000 - $175,000 (bonus eligible).
• Ongoing application acceptance.
• Potential in-person interview at an NBCUniversal location.

What is the last date for applying to the job?

Which countries are accepted for this remote job?