Content Security Engineer, GME Security

Overview

In this role, you will be the primary content security advisor to production teams, helping design secure workflows and cloud tooling. You’ll research and pilot advanced protection methods and support security operations for pre-release content across the production lifecycle. You will automate workflows with scripting, build security tooling, and coordinate security across internal teams and third-party partners. This position blends advisory work with hands-on engineering to defend content against emerging threats, including generative AI risks.

Pay / Benefits

• flexible work hours
• career growth resources
• DEI events and learning experiences
• inclusive culture
• work-life balance
• opportunity to work on cutting-edge content security projects

Responsibilities

• Serve as the primary content security advisor to film and series production teams, guiding secure workflow design (editorial environment, Aspera transfers, cloud storage, on-set networking)
• Assess internal and external content processing architectures to securely deploy networks and equipment
• Manage security assessments of 3rd party services and tools, including vendor security coordination
• Research, evaluate, and pilot next-generation content security measures (forensic watermarking, audio/video fingerprinting, content tracking)
• Contribute to strategy for securing pre-release content against generative AI threats, translating risks into actionable controls
• Maintain and enhance AWS infrastructure and applications supporting Content Security operations; build internal tooling to automate workflows (access governance, audit reporting, compliance monitoring)
• Write and maintain lightweight automation (Python/scripting) to support tooling, audits, and reporting
• Develop and iterate security standard operating procedures tailored to each studio and production team
• Provide regular written updates on program status, risk posture, and incident findings

Key requirements

• 3+ years scripting, programming, and security code review in a common programming language
• 3+ years of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration or network security
• Experience applying threat modeling or similar risk identification techniques
• Knowledge of industry-based security vulnerabilities and remediation techniques
• Knowledge of usage or integration with cloud-hosted services

• Strong communication and cross-functional collaboration
• Analytical mindset with risk-focused decision making
• Proactive problem solving and adaptability
• Python scripting
• AWS products and services
• Threat modeling and secure design review

…