Skip to main content
CareerApp

Sr. WAF Security Engineer

Warner Bros. Discovery

full time · Senior

$105,280 – $195,520

Listed on Warner Bros. Discovery’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

A senior security role focused on implementing and maintaining enterprise Web Application Firewalls and DDoS protections across a media company's digital properties. This suits experienced security engineers comfortable with hands-on infrastructure work who want to guide broader teams on perimeter security practices.

Our summary, not Warner Bros. Discovery’s wording. The full posting is on their site.

Skills this role names

Log in to see which of these are already on your profile.

What they ask for

Required

  • Bachelor's degree in Computer Science, Information Security, or equivalent work experience
  • 5+ years in application or network security with direct WAF/DDoS experience
  • Hands-on expertise with at least one major WAF platform
  • Experience writing or modifying WAF rules
  • Practical experience with a major cloud provider SDK
  • Understanding of HTTP/HTTPS protocols, OWASP Top 10, and API security
  • Log analysis tools proficiency
  • Scripting skills in Python, Bash, or PowerShell
  • Experience securing applications across AWS, GCP, or Azure
  • Problem-solving and cross-team collaboration skills
  • Hybrid work 3 days onsite in Atlanta, DC, or Silver Spring

Nice to have

  • Security certifications such as CISSP, CISM, CISA, or SANS
  • Infrastructure-as-code experience with Terraform or CloudFormation
  • CDN integration and API Security framework familiarity
  • Large-scale DDoS mitigation experience including volumetric and application-layer attacks

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.