About The Company NBCUniversal is one of the world's leading media and entertainment companies, renowned for creating and distributing high-quality content across multiple platforms. The company’s portfolio includes a diverse range of film, television, and streaming services, complemented by global theme park destinations, consumer products, and immersive experiences.
NBCUniversal owns and operates some of the most prominent entertainment and news brands, including NBC, NBC News, NBC Sports, Telemundo, NBC Local Stations, Bravo, and Peacock, its premium ad-supported streaming service. The company produces and distributes top-tier film and television content through its renowned studios such as Universal Pictures, DreamWorks Animation, Focus Features, and the Universal Studio Group. Additionally, NBCUniversal manages industry-leading theme parks and experiences worldwide, including Universal Orlando Resort, Universal Studios Hollywood, and Universal Epic Universe.
As a subsidiary of Comcast Corporation, NBCUniversal is committed to innovation, community engagement, and fostering an inclusive culture that reflects the diversity of its global audiences. With a focus on creating impactful content and memorable experiences, NBCUniversal continues to shape the future of entertainment and media.
About The Role We are seeking a highly skilled Staff Cyber Security Engineer to join our NBCU Security Architecture team. This pivotal role involves partnering with various NBCUniversal business units, enterprise IT, and Cyber Security teams to ensure that all technology deployments are secure, compliant, and aligned with enterprise security strategies.
The successful candidate will lead end-to-end security and threat analysis for enterprise initiatives involving new or modified technology deployments. They will be responsible for integrating best practices and guidelines for Information Security into system designs, ensuring robust security postures across the organization. The role requires acting as a technical subject matter expert across multiple Cyber Security domains, including network, application, cloud, and enterprise security controls.
The engineer will collaborate with cross-functional teams and business stakeholders to provide security guidance, mitigate risks, and support the organization’s security objectives. Effective communication of cybersecurity programs’ importance to various audiences is essential to gain support and foster a security-conscious culture. This position offers an exciting opportunity to influence security architecture at a global entertainment leader during a period of rapid evolution and innovation in cybersecurity services and processes.
Qualifications
8+ years of experience in cybersecurity, including partnership with business and technical teams
Proven experience in designing and delivering cybersecurity solutions
Expertise in threat mitigation best practices across perimeter security, application security, core systems, EDR, and cloud environments
Ability to explain common threats related to network, cloud, web, and application environments
Experience working with cross-functional teams to clarify cybersecurity requirements during project phases
Knowledge of industry best practices such as OWASP Top 10, CWE/SANS Top 25
Advanced technical proficiency in at least one cybersecurity domain
Strong communication skills for technical and non-technical audiences
Experience developing security guidelines and documenting security controls
Proficiency in using diagramming tools to communicate secure designs
Excellent time management skills for handling multiple projects
Relevant experience in threat analysis, modeling, and leveraging frameworks like MITRE ATT&CK
Familiarity with security controls such as NIST CSF, CIS Critical Security Controls
Understanding of data and privacy regulations including PCI DSS, SOX, HIPAA, GDPR, CCPA
Knowledge of cloud services (IaaS, PaaS, SaaS) and cybersecurity operations
Ability to balance security policies with operational needs
Formal degree not required; relevant experience prioritized
Responsibilities
Conduct comprehensive security and threat analyses for enterprise initiatives involving new or updated technologies
Ensure all system designs incorporate cybersecurity best practices and compliance standards
Act as a subject matter expert across cybersecurity technology areas, including network, application, cloud, and enterprise controls
Collaborate with cybersecurity teams, business units, and IT to develop security guidance and mitigation strategies
Develop and document security standards, policies, and best practices for the organization
Communicate the importance of cybersecurity initiatives to stakeholders at all levels
Participate in threat modeling and risk assessments, leveraging frameworks such as MITRE ATT&CK
Design and review secure architecture diagrams and controls using diagramming tools
Mentor team members and foster a culture of continuous improvement and security awareness
Stay current with industry trends, emerging threats, and evolving security technologies
Assist in incident response planning and support cybersecurity operations when needed
Ensure compliance with relevant data privacy and security regulations
Benefits
Medical, dental, and vision insurance coverage
401(k) retirement plan with company matching
Paid leave and holidays
Tuition reimbursement programs
Opportunities for professional development and training
Employee discounts and perks
Fully remote work environment, offering flexibility and work-life balance
Equal Opportunity
NBCUniversal is an equal opportunity employer. We are committed to creating an inclusive environment for all employees and applicants regardless of race, color, religion, creed, gender, gender identity or expression, age, national origin, ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information.