Security Engineer

• Own and lead the end-to-end SIP program for the APAC region, ensuring consistent execution aligned with global standards and regional business requirements
• Direct the assessment, governance, and ongoing oversight of sensitive information workflows, across both internal teams and third-party partners
• Establish and drive operational cadence, reporting, and performance tracking, delivering insights to leadership on program effectiveness, risks, and opportunities
• Partner with regional and global stakeholders to ensure consistent application of security controls and compliance requirements
• Lead the design and evolution of SIP strategies and initiatives in APAC, aligned to business priorities and content security risk landscape
• Identify and drive opportunities to enhance services, streamline workflows, and improve risk mitigation approaches
• Serve as a key contributor to global SIP program strategy, ensuring regional insights and requirements are incorporated
• Act as a primary point of contact for SIP in APAC, influencing stakeholders across business, technical, and production environments
• Drive alignment across global core team (US, EMEA) and regional partners, ensuring consistent delivery of SIP services
• Lead coordination with external assessors, vendors, and service providers to ensure adherence to Disney’s security standards
• Own the strategy and execution of third-party and production security assessment programs across APAC
• Ensure all partners are appropriately assessed, risk-tiered, and governed using internal systems and frameworks
• Establish and drive ongoing monitoring, reassessment, and compliance validation
• Lead end-to-end assessment and enhancement of sensitive information workflows and systems, identifying vulnerabilities and driving remediation
• Ensure implementation and enforcement of security policies and best practices across internal teams and third-party partners
• Lead regional response coordination for SIP-related incidents, including remediation and root cause analysis
• Own the development and delivery of executive-level reporting and insights on SIP program performance

Content Security Manager, Operations & Support, APAC

• You'll be working directly with security teams, AppSec leaders, and engineering orgs who are integrating autonomous pentesting into their vulnerability management programs.
• Serve as the primary point of contact and for a large and growing portfolio of customers
• Own the end-to-end customer experience across hundreds of accounts; nothing falls through the cracks
• Deliver a high-touch experience when needed by acting as a problem solver—conduct independent analysis and triage before escalating to internal teams
• Develop and own repeatable workflows to scale self-service–led entry with product-led expansion
• Collaborate closely with both product and sales teams to align on strategy and execution
• Act as an external-facing technical program manager—identify process gaps, advocate for fixes, and recognize when automation is needed, even without writing code
• Represent the voice of the customer internally to drive adoption and continuous improvement
• Advocate for product and process changes that reduce friction, automate touchpoints, and improve outcomes
• Navigate product questions with confidence, escalating appropriately even without deep domain knowledge
• Translate pentesting findings and vulnerability data into actionable guidance for security and engineering stakeholders
• Understand application security concepts — OWASP Top 10, CVSS scoring, common vulnerability classes — well enough to field customer questions and contextualize results
• Work with customers running large-scale assessments across dozens or hundreds of applications, tracking coverage, SLA adherence, and finding trends
• Partner with Product and Engineering to triage edge cases in scan results, distinguishing between product gaps and expected behavior
• Build and maintain customer-facing documentation, runbooks, and enablement materials grounded in real product workflows

Application Security Program Manager

• Serve as the primary point of contact and for a large and growing portfolio of customers
• Own the end-to-end customer experience across hundreds of accounts; nothing falls through the cracks
• Deliver a high-touch experience when needed by acting as a problem solver—conduct independent analysis and triage before escalating to internal teams
• Develop and own repeatable workflows to scale self-service–led entry with product-led expansion
• Collaborate closely with both product and sales teams to align on strategy and execution
• Act as an external-facing technical program manager—identify process gaps, advocate for fixes, and recognize when automation is needed, even without writing code
• Represent the voice of the customer internally to drive adoption and continuous improvement
• Advocate for product and process changes that reduce friction, automate touchpoints, and improve outcomes
• Navigate product questions with confidence, escalating appropriately even without deep domain knowledge
• Translate pentesting findings and vulnerability data into actionable guidance for security and engineering stakeholders
• Understand application security concepts — OWASP Top 10, CVSS scoring, common vulnerability classes — well enough to field customer questions and contextualize results
• Work with customers running large-scale assessments across dozens or hundreds of applications, tracking coverage, SLA adherence, and finding trends
• Partner with Product and Engineering to triage edge cases in scan results, distinguishing between product gaps and expected behavior
• Build and maintain customer-facing documentation, runbooks, and enablement materials grounded in real product workflows

Technical Account Manager – Application & Offensive Security

• Managing the day-to-day security operations at corporate locations in Korea.
• Drive multiple security projects effectively, including managing key performance indicators, vendor management, and quality control. This will often include liaising with other members of the Enterprise Security or Environmental Health and Safety team to ensure project alignment.
• Where necessary, contextualize and add regional-specific vigor to global programs to further optimize overall program delivery.
• Develop key relationships with corporate real estate teams, landlords, and third-party security vendors, ensuring cohesion across the site’s security and safety functions.
• Develop bespoke training packages in support of the existing guard force.
• Implementation of site incident management procedures.
• Support and liaise with the Environmental Health & Safety/Workplace teams to ensure all EHS standards are maintained across all facilities.
• Ensuring effective communication and reporting to the North East Asia Security Operations Lead, and work towards the standards set by the wider security team.

See all jobs on JobTailor

Content Security Manager, Operations & Support, APAC

Application Security Program Manager

Technical Account Manager – Application & Offensive Security

Physical Security Specialist