Skip Navigation
japen-menu Back English 简体中文 繁體中文 日本語 Français Deutsch Español Português
Choose a Language

Be Part of the Story

Security Engineer/Developer

Job ID 420658BR Location New York, New York, United States Job Posting Company Marvel Job Posting Area Marvel Date posted 04/30/2017
Marvel Entertainment is hiring an experienced Security Engineer/Developer to join our Infrastructure & Operations team. In this role, you’ll report to the Director of Architecture & Security and will work across a variety of security functions supporting the internet-facing aspects of Marvel’s successful online businesses. The ideal candidate will be either a talented security engineer who has learned back-end web development frameworks and tools or a seasoned back-end developer who has strong skills and experience in security.

As part of Marvel Entertainment’s Infrastructure & Operations team, you will be charged with maintaining and improving our security profile for thousands of sites and services involved in delivering engaging and robust user experiences.

We are looking for a passionate and experienced software engineer who thinks logically, acts rationally and understands the challenges of supporting current and emerging technology stacks that enable Marvel to continue to grow our universe of characters and the multi-media, multi-lingual, multi-platform infrastructure on which they reside.

This is an on-site position in Marvel’s NYC office. Candidates must be legally permitted to work in the United States. No recruiter-submitted candidates.


  • Work alongside a talented team of colleagues and quintessentially creative individuals who are building next-generation mobile, web and back-end applications and services
  • Development and implementation of web and mobile applications using PHP, Java and MVC frameworks in a Linux-based environment
  • Writing clean, fast PHP to a high standard, in a timely and scalable way. Experienced with ZendPHP and Laravel
  • Bring security considerations and requirements to product design and implementation for award-winning digital comics subscription products used by millions of fans
  • Assess the fit for new and emerging technologies and design patterns from a security perspective that maintains a high degree of awesome
  • Work with traditional software development lifecycle methodologies as well as newer agile-based approaches to design, code, peer review and troubleshoot services delivering millions of digital assets
  • Participate/lead regular security reviews for deployments, pen-testing of the environment and vulnerability remediation

Basic Qualifications

  • 3+ years hands-on experience with server-side web and MVC development
  • 3+ years hands-on experience with SOAP, REST and XML-RPC web services
  • 2+ years of hands-on experience in a security role
  • Solid understanding of networking, storage and sysadmin best practices
  • Demonstrated experience securing high-traffic properties (cloud and on-prem)
  • Strong sense of ownership and execution-oriented activity
  • Ability to juggle and prioritize multiple projects and meet deadlines
  • Critical thinking skills with a high attention to detail when assessing severity and impact of security issues
  • Expert at web application firewalls and web server security configurations
  • Knowledge of web inspect, fortify and other security testing tools

Preferred Qualifications

  • Familiarity with open source and commercial security testing and QA tools
  • Deep understanding of security protocols, exploits and mitigating technologies
  • Track record of delivering hardened, fault-tolerant, high-availability designs
  • Experience with ansible, chef or puppet
  • Cool-headed in a crisis and instill confidence in those around you while solving problems
  • Lazy enough to automate tasks, smart enough to document them well (L7 diagrams)
  • Deep understanding of OWASP best practices and static code analysis
  • Knowledge of Federation technologies including SAML, OAUTH, OpenID connect

Required Education

Bachelor’s degree required, security certifications not required so long as you are qualified.

Company Overview

Marvel Entertainment, LLC, a wholly-owned subsidiary of The Walt Disney Company, is one of the world's most prominent character-based entertainment companies, built on a proven library of over 8,000 characters featured in a variety of media over seventy years. Marvel utilizes its character franchises in entertainment, licensing and publishing.

Watch Our Jobs

Sign up to receive new job alerts and company information based on your preferences.

Specify LocationsSearch for a category and select one from the list of suggestions. Search for a location and select one from the list of suggestions. Finally, click “Add” to create your job alert.

  • Digital / Interactive Media, New York, New York, United StatesRemove
  • Marvel, New York, New York, United StatesRemove