Warner Bros. Discovery
Manager, Offensive Security & Penetration Testing
Warner Bros. Discovery, Atlanta, Georgia, United States, 30383
Welcome to Warner Bros. Discovery... the stuff dreams are made of.
Who We Are...
When we say, "the stuff dreams are made of," we're not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD's vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what's next...
From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.
*Must be able to work a hybrid model (3 days onsite) out of our Atlanta office.*
Job Responsibilities
Deliver high quality security assessment reports to stakeholders and drive change to improve the security posture of the organization.Advancing strategic initiatives by influencing leadership, key stakeholders, and partnering with teams throughout WBD.Influence team strategy, direction, and priorities.Leading effective teamwork, communication, collaboration and commitment across multiple disparate groups with competing priorities.Create detailed security assessment plans for penetration team engineers to execute.Assess current team capabilities and create a roadmap for future state capabilities that in line with the industry leaders in Security assessments.Execute and Lead penetration testing engagements against a variety of web applications/services and software.Develop and execute attack strategies to simulate real-world attacks by threat actors.Ability to identifying and exploiting vulnerabilities in computer systems, networks, and applications to simulate attacks by threat actors.Analyze and report on the results of security assessments and make recommendations to improve the security posture of the organization.Advise management about noncompliance with defined standards in applications tested.Partner with developers to drive improvement in application security as a result of security assessment engagements.Provide clear communication on the issue to developers and verify the efficacy of the 'fix'.Provide actionable remediation feedback for findings and/or long-term risk mitigation guidance.Provide guidance and recommendations to other teams to improve the security of products.Demonstrate deep understanding of computer networks, operating systems, databases, web applications, and mobile applications.Experience with Secure software development lifecycle, distributed systems and security protocols.Create custom tools and scripts to automate testing and make the process more efficient.Support and maintain tools used for penetration testing and security assessments.Develop and mentor other security engineers.Must be based in the WBD's office, minimum three days/week.Qualifications & Experiences:
A Bachelor's degree in Computer Science, Cybersecurity, or other related fields, from an accredited university or an equivalent professional experience may suffice in lieu of a Bachelor's degree.Minimum of 10 years of professional experience with security engineering practices such as in web application security, network security, authN/authZ protocols, cryptography, automation, and other software security.Minimum of 5 years of experience in penetration testing, code review, bug bounty hunting, or red teaming/capture the flag experience.Experience in scripting in Python or other languages to build automation tools.Team player with strong communication skills.Experience briefing senior leaders.
If you:
are excited to work in an international, fast-paced, multi-faceted media company.are comfortable ensuring timely escalation, responsiveness and follow through to meet deadlines.are knowledgeable of, and understand, the risk-based business impact approach to cybersecurity.are actively questioning and influencing actions needed to attain goals and targets.are comfortable driving strategic initiatives forward.
Then help us create the future with one of the world's largest media & entertainment companies.
How We Get Things Done...
This last bit is probably the most important! Here at WBD, our guiding principles are the core values by which we operate and are central to how we get things done. You can find them at www.wbd.com/guiding-principles/ along with some insights from the team on what they mean and how they show up in their day to day. We hope they resonate with you and look forward to discussing them during your interview.
Championing Inclusion at WBDWarner Bros. Discovery embraces the opportunity to build a workforce that reflects the diversity of our society and the world around us. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, mental or physical disability, and genetic information, marital status, citizenship status, military status, protected veteran status or any other category protected by law.
If you're a qualified candidate with a disability and you require adjustments or accommodations during the job application and/or recruitment process, please visit our accessibility page for instructions to submit your request.
Who We Are...
When we say, "the stuff dreams are made of," we're not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD's vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what's next...
From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.
*Must be able to work a hybrid model (3 days onsite) out of our Atlanta office.*
Job Responsibilities
Deliver high quality security assessment reports to stakeholders and drive change to improve the security posture of the organization.Advancing strategic initiatives by influencing leadership, key stakeholders, and partnering with teams throughout WBD.Influence team strategy, direction, and priorities.Leading effective teamwork, communication, collaboration and commitment across multiple disparate groups with competing priorities.Create detailed security assessment plans for penetration team engineers to execute.Assess current team capabilities and create a roadmap for future state capabilities that in line with the industry leaders in Security assessments.Execute and Lead penetration testing engagements against a variety of web applications/services and software.Develop and execute attack strategies to simulate real-world attacks by threat actors.Ability to identifying and exploiting vulnerabilities in computer systems, networks, and applications to simulate attacks by threat actors.Analyze and report on the results of security assessments and make recommendations to improve the security posture of the organization.Advise management about noncompliance with defined standards in applications tested.Partner with developers to drive improvement in application security as a result of security assessment engagements.Provide clear communication on the issue to developers and verify the efficacy of the 'fix'.Provide actionable remediation feedback for findings and/or long-term risk mitigation guidance.Provide guidance and recommendations to other teams to improve the security of products.Demonstrate deep understanding of computer networks, operating systems, databases, web applications, and mobile applications.Experience with Secure software development lifecycle, distributed systems and security protocols.Create custom tools and scripts to automate testing and make the process more efficient.Support and maintain tools used for penetration testing and security assessments.Develop and mentor other security engineers.Must be based in the WBD's office, minimum three days/week.Qualifications & Experiences:
A Bachelor's degree in Computer Science, Cybersecurity, or other related fields, from an accredited university or an equivalent professional experience may suffice in lieu of a Bachelor's degree.Minimum of 10 years of professional experience with security engineering practices such as in web application security, network security, authN/authZ protocols, cryptography, automation, and other software security.Minimum of 5 years of experience in penetration testing, code review, bug bounty hunting, or red teaming/capture the flag experience.Experience in scripting in Python or other languages to build automation tools.Team player with strong communication skills.Experience briefing senior leaders.
If you:
are excited to work in an international, fast-paced, multi-faceted media company.are comfortable ensuring timely escalation, responsiveness and follow through to meet deadlines.are knowledgeable of, and understand, the risk-based business impact approach to cybersecurity.are actively questioning and influencing actions needed to attain goals and targets.are comfortable driving strategic initiatives forward.
Then help us create the future with one of the world's largest media & entertainment companies.
How We Get Things Done...
This last bit is probably the most important! Here at WBD, our guiding principles are the core values by which we operate and are central to how we get things done. You can find them at www.wbd.com/guiding-principles/ along with some insights from the team on what they mean and how they show up in their day to day. We hope they resonate with you and look forward to discussing them during your interview.
Championing Inclusion at WBDWarner Bros. Discovery embraces the opportunity to build a workforce that reflects the diversity of our society and the world around us. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, mental or physical disability, and genetic information, marital status, citizenship status, military status, protected veteran status or any other category protected by law.
If you're a qualified candidate with a disability and you require adjustments or accommodations during the job application and/or recruitment process, please visit our accessibility page for instructions to submit your request.