Principal Cyber Security Engineer (UK REMOTE)

NBCUniversal; London; Remote; GBP 80,000 - 120,000; Full time

Job summary

A leading media and entertainment company is looking for a Principal Cyber Security Engineer to enhance security measures across technology platforms. The role involves collaboration with various teams to ensure secure design and deployment, focusing on threat analysis and security best practices. Ideal candidates will have extensive cybersecurity experience and strong communication skills.

Qualifications

• Extensive experience with cybersecurity solutions.
• Strong knowledge of secure software development lifecycle.
• Ability to explain common threats to various components.

Responsibilities

• Conduct end-to-end security and threat analyses.
• Integrate security best practices into system designs.
• Provide mentorship and leadership in security practices.

Skills

Cybersecurity Solutions

Threat Mitigation

Risk Management

Secure Software Development

Cloud Services

Communication

Education

Relevant Experience

Job description

Principal Cyber Security Engineer (UK REMOTE)

Company Description
NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Job Description
We are seeking a Principal Cyber Security Engineer to join our NBCU Consumer Product Security team. This role involves partnering with the Global Streaming Technology and Cyber Security organizations to ensure secure design and deployment of technology, aligning with security and enterprise strategies. Responsibilities include conducting end-to-end security and threat analyses of enterprise initiatives, integrating security best practices into system designs, and serving as a technical expert in network, application, cloud, and enterprise security controls. The role requires collaboration across teams, communicating security initiatives effectively to stakeholders, and providing mentorship and leadership in security practices.

Qualifications

• Extensive experience working with business and technical teams to architect and implement cybersecurity solutions.
• Proven ability to advise on threat mitigation across various technical domains such as Perimeter Security, Application Security, Core Systems, EDR, and Cloud.
• Deep understanding of Threat Modeling and risk management for large-scale systems, including streaming platforms and user data protection.
• Strong knowledge of secure software development lifecycle (SDLC) and coding practices.
• Experience with consumer-facing applications, particularly in streaming media, OTT, or digital media services.
• Comprehensive knowledge of cloud services (IaaS, PaaS, SaaS) and associated risks.
• Ability to explain common threats to network, cloud, web, and application components.
• Experience collaborating with teams to incorporate cybersecurity requirements throughout project phases.
• Familiarity with industry standards such as OWASP Top 10, CWE/SANS Top 25, CIS Controls, and NIST Cloud Security guidelines.
• Technical expertise in at least one cybersecurity domain, with the ability to address complex challenges.
• Strong communication skills for technical and non-technical audiences, with experience in developing security documentation and architecture diagrams.
• Excellent time management and multitasking skills.

Preferred Qualifications

• Relevant experience prioritized over formal degrees.
• Knowledge of data privacy regulations like PCI DSS, SOX, HIPAA, GDPR, CCPA.
• Understanding of cybersecurity operations, incident response, and GRC functions.
• Ability to balance security policies with operational needs, demonstrating empathy for engineering teams.

Additional Information

Candidates may be required to attend an in-person interview at an NBCUniversal location. NBCUniversal is an equal opportunity employer and provides accommodations for applicants with disabilities. Requests can be sent to [e-mail].