M+E Technology Job Board

Director, Information Security

  • linkedin
  • fb
  • twitter
  • google plus
  • email

Skydance

If you are passionate about making movies and television, Skydance is the place for you! Our creative divisions are led by industry veterans that put audience above all else when it comes to our storytelling approach. At Skydance, we embrace visionary artists and cutting-edge technology to create event-level entertainment. With the benefit of powerful distribution partnerships – Paramount Pictures, Tencent, Netflix, Prime Video, Apple TV+, and other top tier studios – our premium content can reach billions of consumers around the world.

Our corporate headquarters in Santa Monica, where we strive to create a collaborative environment, is the center for all our film and television teams. Other departments include production, marketing, business affairs, finance, human resources, and operations. Whether you are a seasoned executive or an assistant just starting out, everyone is valued on the Skydance team!

Skydance Media is a modern content creator managing IP across a panoply of mediums including features, television, animation, and video games on a global footprint. The Skydance Information Security Director is responsible for shaping company policy, advising IT Executive Staff on current and potential threats, monitoring and maintaining a proactive security posture, and rigorous testing and risk management. This includes but is not limited to Network Monitoring, Preventative and Detection Controls, Forensics and Investigations, Security Awareness, Security Vulnerability Management, and Cyber Threat Intelligence activities.
#LI-ER1

Responsibilities
Writing security policies and procedures documenting requirements and architecture
Maintain a SOC playbook
Penetration and vulnerability testing and the clear presentation of actionable findings
Assess, triage and prioritize security alerts from logging and monitoring systems
Identify, triage, and remediate threats based on threat intelligence
Investigate and communicate with peers on the risk posed by these threats
Report on findings from investigations and incidents to stakeholders as needed
Evaluate system, application, and user data for adherence to organizational and government policies and procedures
Assess newly published vulnerabilities and attacker Tactics, Techniques and Procedures to identify possible defensive measures to locate and stop threat actors
Contributes to tool optimization and automation initiatives to streamline analysis and response workflows.

Requirements
Bachelor’s degree in information systems, security, computer science or 4 years professional experience and 5+ years professional experience in information security areas such as threat hunting, incident response, forensics, security analysis, security engineering etc.
Experience with operating system internals and security controls including macOS, Windows, and Linux
Experience with regular expressions and scripting language(s) (e.g. Python, Bash or PowerShell)
Experience configuring and analyzing WANs, LANs, VLANs, VPNs, and TCP/IP protocols
Experience developing and managing standards for AD, Group Policies, Cloud system switching/routing, Virtualization, Business Continuity and DR
Experience with malware behavioral analysis and broader system forensics
Exceptional written and verbal communication skills
Apply critical thinking to all activities and actions, in pursuit of Skydance’s InfoSec goals
Demonstrable track record of exceptional performance
Exceptional organizational and self-management skills

Preferred Skills and Experience
Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) preferred
ISC2, ISACA, GIAC a plus
Media & Entertainment experience a plus