Every great story has a new beginning, and yours starts here.
Welcome to Warner Bros. Discovery… the stuff dreams are made of.
Who We Are…
When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next…
From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.
Your New Role...
The Sr. Product Security Engineer will work within WBD’s Global Information and Content Security team and cooperate with Direct to Consumer (DTC) teams on initiatives to design and deploy appropriate, risk-based application security safeguards and technical application security controls to protect data, services, and technology assets of WBD’s products. The role will focus on application security for our streaming media service and other supporting applications. This Sr. Product Security Engineer will work closely with development and engineering teams to ensure secure architectures, patterns, and solutions are created and maintained. The person taking this position will strive to become a subject matter expert on product security and secure code development gaining experience through communication and collaboration with various application engineering teams to facilitate the improvement of the existing SSDLC process within the organization.
Your Role Accountabilities...
TECHNICAL
Execute and evolve the Product Security Engagement program
Perform threat modeling and review technical architecture product security architectures and critical user journeys.
Evaluate current system security measures and recommend or implement enhancements.
Review and contribute to application designs and solutions with security architecture evaluations
EXECUTION
Participate in information security operations duties, including occasional incident response escalations as a subject matter expert.
Work collaboratively and proactively across the organization (e.g., Technical Architects, Engineering Leads, Product managers, Digital Media Program (AGILE) Teams, etc.) to support remediation security gaps
Identify and define product security requirements and security baselines.
Qualifications & Experience...
5+ years of product/application security work experience
Hybrid work environment. Must spend a minimum three-days/week in our Atlanta office.
Knowledge of common security principles for web application architectures
Experience in code reviews, business logic assessment, and application security testing
Solid understanding of security protocols, cryptography, authentication, authorization and security
Broad knowledge of Security technologies, process, and techniques and a strong understanding of application security leading practices including OWASP and CWE
Familiarity with HTML\CSS, JavaScript and UI\UX design and software quality assurance principles
Hands-on experience working with DevOps and Agile driven product teams.
Knowledge of practical threat modeling for consumer applications
Experience in secure software development principles in various languages (Java, Go, JavaScript, Python, etc.)
Excellent communication and presentation abilities with great attention to detail
Demonstrated ability to explain risks and vulnerabilities to both technical and non-technical audiences
The Nice to Haves
Bachelor's degree in Computer Science or Information Security or related field
Familiar with application security tools like BurpSuite Pro, SAST, DAST, nmap, Metasploit, and Kali Linux.
Knowledge of cloud security principles
Experience in application/tool development with at least one modern programming language
GPEN, GXPN, GMOB or other Security Certifications
LI-Hybrid
How We Get Things Done…
This last bit is probably the most important! Here at WBD, our guiding principles are the core values by which we operate and are central to how we get things done. You can find them at www.wbd.com/guiding-principles/ along with some insights from the team on what they mean and how they show up in their day to day. We hope they resonate with you and look forward to discussing them during your interview.
The Legal Bits…
Warner Bros. Discovery embraces the opportunity to build a workforce that reflects the diversity of our society and the world around us. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, mental or physical disability, and genetic information, marital status, citizenship status, military status, protected veteran status or any other category protected by law.
If you’re a qualified candidate and you require adjustments or accommodations to search for a job opening or apply for a position, please contact us at [email protected].