Security Engineer/Developer
Marvel Entertainment
New York, NYThis was removed by the employer on 7/18/2017 4:49:00 PM PST
Not to worry we have many other jobs on the site;
Browse all jobs
Browse the IS/IT Category
Browse the Web Design/Development Category
Search for Security Engineer/Developer jobs in New York-NY
Search all Security Engineer/Developer postings
Full Time Job
Marvel Entertainment is hiring an experienced Security Engineer/Developer to join our Infrastructure & Operations team. In this role, you'll report to the Director of Architecture & Security and will work across a variety of security functions supporting the internet-facing aspects of Marvel's successful online businesses. The ideal candidate will be either a talented security engineer who has learned back-end web development frameworks and tools or a seasoned back-end developer who has strong skills and experience in security.
As part of Marvel Entertainment's Infrastructure & Operations team, you will be charged with maintaining and improving our security profile for thousands of sites and services involved in delivering engaging and robust user experiences.
We are looking for a passionate and experienced software engineer who thinks logically, acts rationally and understands the challenges of supporting current and emerging technology stacks that enable Marvel to continue to grow our universe of characters and the multi-media, multi-lingual, multi-platform infrastructure on which they reside.
This is an on-site position in Marvel's NYC office. Candidates must be legally permitted to work in the United States. No recruiter-submitted candidates.
Responsibilities
• Work alongside a talented team of colleagues and quintessentially creative individuals who are building next-generation mobile, web and back-end applications and services
• Development and implementation of web and mobile applications using PHP, Java and MVC frameworks in a Linux-based environment
• Writing clean, fast PHP to a high standard, in a timely and scalable way. Experienced with ZendPHP and Laravel
• Bring security considerations and requirements to product design and implementation for award-winning digital comics subscription products used by millions of fans
• Assess the fit for new and emerging technologies and design patterns from a security perspective that maintains a high degree of awesome
• Work with traditional software development lifecycle methodologies as well as newer agile-based approaches to design, code, peer review and troubleshoot services delivering millions of digital assets
• Participate/lead regular security reviews for deployments, pen-testing of the environment and vulnerability remediation
Basic Qualifications
• 3 years hands-on experience with server-side web and MVC development
• 3 years hands-on experience with SOAP, REST and XML-RPC web services
• 2 years of hands-on experience in a security role
• Solid understanding of networking, storage and sysadmin best practices
• Demonstrated experience securing high-traffic properties (cloud and on-prem)
• Strong sense of ownership and execution-oriented activity
• Ability to juggle and prioritize multiple projects and meet deadlines
• Critical thinking skills with a high attention to detail when assessing severity and impact of security issues
• Expert at web application firewalls and web server security configurations
• Knowledge of web inspect, fortify and other security testing tools
Preferred Qualifications
• Familiarity with open source and commercial security testing and QA tools
• Deep understanding of security protocols, exploits and mitigating technologies
• Track record of delivering hardened, fault-tolerant, high-availability designs
• Experience with ansible, chef or puppet
• Cool-headed in a crisis and instill confidence in those around you while solving problems
• Lazy enough to automate tasks, smart enough to document them well (L7 diagrams)
• Deep understanding of OWASP best practices and static code analysis
• Knowledge of Federation technologies including SAML, OAUTH, OpenID connect
Required Education Bachelor's degree required, security certifications not required so long as you are qualified.