Content Marketing Manager

• Publish content to the NBA’s Instagram pages by uploading video or still imagery with copy, tags and additional publishing details during real-time game coverage and for additional content franchises.
• Assist with content planning for Reels, Carousels, Stories, Broadcast Channels and more
• Review content metrics and implement platform feedback to optimize content performance
• Monitor NBA team and player Instagram pages for amplification on the NBA’s Instagram pages
• Monitor trends on the platform
• Ability to assist with similar publishing responsibilities on additional Meta platforms (Facebook, Threads, etc.) or other NBA social platforms when needed

Project Employee, Social Content Publishing – Instagram

Security Engineer

• Manage the enterprise vulnerability management program across cloud and on-premises environments, leveraging risk-based decision making to prioritize remediation efforts, coordinate stakeholders, and reduce organizational exposure.
• Design, implement, and operate AI security strategies and governance processes to ensure secure adoption of emerging AI technologies, identifying, assessing, and mitigating associated risks in alignment with organizational goals.
• Oversee the Cyber Threat Intelligence program, leveraging intelligence collection and analysis to identify and prioritize emerging risks, deliver actionable intelligence, and communicate threat assessments to technical, business, and executive stakeholders.
• Collect and aggregate intelligence from OSINT, Deep/Dark Web resources, and other intelligence sources to monitor exploitable and high-profile threats impacting the NBA League Office and NBA teams.
• Research emerging threat actor tactics, techniques, and procedures (TTPs) to assess risk and validate security controls.
• Perform continuous monitoring and exposure management activities across cloud, on-premises, and external-facing environments to identify emerging security risks, obsolete systems, and configuration weaknesses.
• Manage the League's Team Audit and Risk Assessment Program across all NBA teams, overseeing assessments, control evaluations, remediation tracking, and reporting to strengthen security governance and ensure compliance with League security requirements.
• Collaborate closely with cross-functional business units and NBA teams to drive security initiatives, coordinate remediation of identified vulnerabilities, and reduce the NBA's overall risk profile.
• Communicate findings, risk posture, and program metrics & key performance indicators (KPIs) to technical operators, business stakeholders, NBA teams, and senior leadership to support informed decision-making and continuous improvement.

Senior Cyber Security Engineer

DevOps Engineer

• Secure CI/CD pipelines at scale across the organization's CI/CD platforms with standardized security templates and automated policy enforcement, embedding static analysis (SAST), software composition analysis (SCA), container, infrastructure as code (IaC), and secrets scanning, with break build enforcement on critical and high severity findings
• Administer the enterprise SAST and SCA platform (scan engine infrastructure, query tuning, severity calibration, finding triage) and maintain the exploitability knowledge base that distinguishes true positives from false positives to keep security fast and low friction
• Build automated compliance tooling that detects required scans, validates pipeline configuration, and flags coverage gaps; audit pipeline posture across platforms and drive remediation directly with engineering teams
• Support secure SDLC practices and security gates (SAST, SCA, container, IaC, DAST), threat modeling, SBOM generation, and dependency verification; coordinate with the DAST and penetration testing functions and act on bug bounty findings
• Design and build the enterprise security operations platform and the automation that orchestrates DevSecOps workflows (scan state changes, triage, exemptions, intake, notifications), including AI-assisted vulnerability triage with appropriate guardrails, audit trails, and human oversight
• Define and report security risk metrics, lead security audits and assessments, conduct supply chain and CVE incident response across the estate, and mentor junior team members
• Lead security reviews of Generative AI applications, agentic workflows, and AI developer tools submitted through the enterprise AI intake process, assessing against OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, NIST AI RMF, MITRE ATLAS, and NBA Gen AI security policy and standards
• Author and maintain NBA Generative AI security policy and standards, including controls for AI data protection, model and prompt security, agentic AI, MCP (Model Context Protocol) integration, and AI developer tooling
• Evaluate and onboard Gen AI security tooling such as runtime guardrails, AI red teaming, browser and DLP controls, and MCP governance, and design and operate runtime AI security controls integrated into application pipelines and runtime
• Govern enterprise security over AI developer tooling and the MCP server approval workflow, and partner with the Enterprise Gen AI, Cloud Infrastructure, GRC, Legal, and Privacy functions to align AI security controls with broader AI governance
• Administer and operate the enterprise cloud security platform across a large multi-cloud estate (cloud posture, container, and IaC scanning); detect, prioritize, and drive remediation of misconfigurations and vulnerabilities against defined SLAs with infrastructure and application teams
• Own cloud security scanning policy configuration and service account governance (scope, least privilege, credential rotation), lead platform lifecycle work, and perform technical security configuration assessments of cloud platforms
• Own the Kubernetes security posture across a large cluster footprint, including admission control, RBAC, namespace isolation, network policies, and Pod Security Standards, and execute admission controller enforcement programs that move policies from audit to block in staged, owner-communicated rollouts with exception and rollback processes
• Design and operate automated credential rotation across cloud identity and key management services (cross-account role assumption, grace periods, owner notifications) and lead the initiative to eliminate static access keys in favor of OAuth 2.0, OIDC, and role-based authentication
• Manage the secrets lifecycle across cloud and pipeline secret stores with detection, alerting, and automated rotation, and build reporting that surfaces aging and non-compliant secrets

Gen AI Security, DevSecOps Engineer

Events

• Develop and maintain the long-term strategic vision for event and studio production innovation across NBA and WNBA Local Media.
• Identify opportunities to improve production quality, ingenuity, efficiency, scalability, reliability, and cost effectiveness through technology and workflow modernization.
• Operationalize new broadcast technologies and workflows.
• Evaluate emerging technologies, industry trends, and evolving fan consumption behaviors to identify opportunities for innovation and competitive advantage.
• Build and maintain multi-year production innovation roadmaps and long-range plans (LRPs) aligned with overall Local Media business objectives.
• Develop and assess capital expenditure (CapEx) and operating expenditure (OpEx) investment strategies, including business case development, ROI analysis, and prioritization recommendations.
• Work closely with vendors, technology partners, teams, and internal stakeholders to evaluate, pilot, and implement next-generation production solutions.
• Serve as the primary innovation lead for new production capabilities including cloud-based workflows, remote production models, artificial intelligence, automation, virtual production, advanced graphics, data integration, and emerging broadcast technologies.
• Research and evaluate new content formats and production techniques that enhance fan engagement and expand audience reach across linear, streaming, social, and emerging platforms.
• Advise Local Media leadership on future production investments, industry developments, strategic risks, and transformation opportunities.
• Partner with Production Operations, Broadcast Engineering, Distribution, Content, Product, and Digital teams to define future-state production capabilities and requirements.
• Ensure NBA Local Media remains an industry leader in production innovation, operational excellence, and next-generation fan experiences.

Broadcast Event & Studio Innovation Lead

• Aggregate risk posture, control gaps, and issue status across all cybersecurity towers into cohesive dashboards and executive-ready reporting frameworks
• Serve as the single point of GRC intelligence — translating disparate signals into a coherent organizational risk picture
• Establish and maintain consistent metrics and KPIs that reflect compliance health across all towers
• Own end-to-end issue lifecycle management — from identification through remediation — ensuring findings don't stall in handoff gaps
• Build accountability mechanisms across tower leads and partner teams that keep risk closure on track without requiring direct authority
• Ensure non-IT departments follow documented processes and help them address audit gaps
• Escalate systemic issues and trend patterns to senior leadership with actionable recommendations
• Lead all aspects of ISO 27001 certification maintenance, including evidence collection, control mapping, audit readiness, and continuous improvement
• Manage relationships with external auditors and certification bodies
• Ensure the program remains audit-ready year-round, not just at certification time
• Contribute into our SOC 2 Type II program and lead compliance posture across applicable trust service criteria
• Coordinate with engineering, IT, and operations teams to ensure controls are implemented, evidenced, and sustainable
• Conduct and document Level 1 cyber risk assessments using established frameworks including NIST CSF and ISO 27001
• Maintain the enterprise cyber risk register, ensuring risks are properly rated, owned, and tracked toward resolution
• Surface emerging risks tied to our industry — fan data systems, broadcast infrastructure, global event operations — with appropriate context for decision-makers
• Partner with tower leads, IT, Legal, Privacy, and Procurement to align on risk priorities and drive coordinated remediation
• Communicate policy and regulatory requirements in language that resonates with both technical practitioners and executive stakeholders
• Operate as a trusted advisor across the organization — influencing outcomes without relying on org chart authority
• Identify opportunities to replace manual compliance effort with scalable automation through GRC platforms and integrations
• Drive adoption and optimization of tools such as Drata, ServiceNow GRC, OneTrust, or equivalent platforms
• Stay ahead of the tooling landscape and bring forward recommendations that improve program efficiency and coverage
• Maintain working knowledge of regulations relevant to our global footprint — including GDPR, CCPA, and evolving data residency requirements across international markets
• Support third-party and vendor risk review processes in coordination with Legal and Procurement, ensuring vendor relationships meet our compliance standards

Cybersecurity Staff Engineer

General

• Support the NBA and its affiliated leagues by designing high-impact visual communications
• Act as a backup manager for the Communications team's social media accounts
• Contribute to the NBA Storyline Creation Team by conceptualizing engaging narratives
• Serve as the On-Duty Communications Representative during NBA games
• Provide communications and media relations support at major events across all leagues

Project Employee, Storyline Creation – Game Night Monitor

• Own reliability and operational excellence for messaging and collaboration platforms.
• Serve as a senior escalation point for complex issues across Proofpoint, Exchange, Outlook, SMTP, and various collaboration services.
• Lead incident response, service restoration, and root cause analysis in high-pressure, real-time scenarios.
• Design and operate highly available, secure, and compliant messaging architectures.
• Automate operations using PowerShell and Microsoft Graph.
• Administer and support Slack and Microsoft Teams, including tenant/workspace configuration and escalations.
• Provide white-glove, high-touch support for the NBA Executive Leadership Team, requiring professionalism, discretion, and urgency.
• Partner with Security, Legal, and Audit teams on compliance, retention, and eDiscovery.
• Participate in a formal rotating on-call schedule.
• Provide after-hours, weekend, and holiday support.
• Respond rapidly to incidents impacting game operations, executive leadership, or league-wide communications.

Senior Site Reliability Engineer, Messaging Services

• The Senior Director, Team and Arena Security - Central Region will be responsible for assessing, planning, and executing industry-leading security programs to protect the safety of NBA employees, players, and fans at league-sponsored games and events both domestically and internationally.
• This position will also support the NBA's business continuity and crisis management efforts.
• This position will report to the Head of Team & Arena Security and will be geographically based.
• This position will also directly support NBA Security’s Lead Investigator with on-court investigations as assigned.
• The ideal candidate is a results-oriented, dynamic executive with proven experience in event security management, crisis management, and emergency planning.
• Strong oral and written communication skills with an emphasis on preparing reports, security assessments, and analysis are required.
• Conduct comprehensive security-based assessments and define, lead, and analyze strategic metrics to accurately measure the effectiveness of the security program in controlling and mitigating risk.
• Responsible for budget management and reconciliation.
• Build and sustain relationships with individuals at all levels of the organization, as well as with law enforcement and security professionals at the federal, state, and local levels.
• Lead/mentor direct reports.
• Provide proactive/preventative security measures and contingency planning.
• Assure security is properly integrated into the overall planning process for all games and/or special events.
• Maintain a best practices standard.
• Oversee implementation of NBA and G League Arena Security Standards by teams and arenas.
• Create and conduct player orientation and team-level awareness training.
• Participate in the security planning and on-site management of security at selected special events, including the NBA, WNBA, NBA G League Playoffs and Finals, All-Star Games, Global Games, basketball camps, NBA Draft, and other special events.
• Serve as a liaison with all relevant domestic and international law enforcement and national security agencies.
• Conduct sensitive investigations across various areas, including players, referees, and other league and team employees for the NBA, WNBA, and G League.
• Assist Legal and other departments in the investigation of any potential integrity-related misconduct.
• Communicate effectively with senior leadership on all investigative findings.