Principal, Security Engineering & Vulnerability Management

Warner Bros. Discovery

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Burbank, CANew York, NY
Salary
$177,170–$329,030 / yr
Employment
Full-time
Posted
6 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $191k
This role $253k
$121k $351k
below market most similar roles pay here above market

This role pays more than 87% of similar roles. Most pay $162,000–$220,500 — the blue band above. At the midpoint, this role pays about $253k versus about $191k for comparable roles.

Based on 240 similar postings.

Employer

About Warner Bros. Discovery

Warner Bros. Discovery is a global media and entertainment company operating a broad portfolio of iconic content and brands including Warner Bros. film studio, HBO, CNN, Discovery Channel, and Max streaming service. Industry: Media & Entertainment

Warner Bros. Discovery currently has 58 open roles on FindRole.

Listed pay typically runs $132,300–$245,700 across 24 roles with salary data.

Most-posted roles

View all roles at Warner Bros. Discovery

At a glance

TL;DR · Principal, Security Engineering & Vulnerability Management

The Principal, Security Engineering & Vulnerability Management for WB Games serves as a key leader within the Global Information and Content Security team. This role involves implementing security strategies, policies, and standards across global WB Games operations to ensure secure technical and digital operations. Responsibilities include leading the adoption of core security services like Identity and Access Management, Vulnerability Management, and Cloud Security while driving threat remediation at scale for internet-facing and internal assets. The position requires integrating security into the software development lifecycle using GitHub and Perforce workflows with tools such as SAST, DAST, secrets management, and CI/CD guardrails. The role addresses the technical challenge of securing game studios, live-service platforms, and online services while maintaining compliance with ISO, NIST, PCI, GDPR, and CCPA frameworks.

What you'll do

  • Lead the adoption and enforcement of global security policies and standards across all WB Games business lines.
  • Partner with GICS leadership to implement core security services including Identity and Access Management, Cloud Security, and Vulnerability Management.
  • Identify and report key risk indicators (KRIs) while providing analytics and executive-level reporting to leadership.
  • Drive vulnerability and threat remediation at scale for internet-facing and internal assets by partnering with engineering owners.
  • Integrate security into the software development lifecycle by embedding SAST, DAST, and secrets management into GitHub and Perforce workflows.
  • Conduct application and product security reviews for new game launches, major releases, and live-service features.
  • Support security operations and incident response teams in identifying and mitigating cybersecurity incidents impacting WB Games.
  • Manage security exceptions for global operations, ensuring proper documentation, risk acceptance, and periodic reviews.

What we're looking for

  • Must work a hybrid schedule (3 days onsite) out of the NYC or Burbank office.
  • Bachelor’s degree in computer science, Engineering, or other related discipline (preferred).
  • 10+ years of previous technical security experience.
  • 10+ years of supervisory or management experience in a technical security environment.
  • Strong technical engineering background to engage with software, infrastructure, and platform engineering teams on architecture and code.
  • Demonstrated experience securing the software development lifecycle using GitHub and Perforce with tools like SAST, DAST, and secrets management.
  • Proven track record in vulnerability and threat remediation at scale for internet-facing and internal assets.
  • Proficiency in cloud security, OWASP top 10, SIEM, vulnerability management, EDR/XDR, and IAM/PAM.
  • Solid knowledge of regulatory requirements and frameworks including ISO, NIST, PCI, GDPR, CCPA, and SOX.
  • Experience in leading projects leveraging global teams with matrix resources.
  • Experience providing cybersecurity services and modeling for Media, Broadcast & Entertainment companies (preferred).
  • Security certifications such as CISSP, CISM, CISA, or SANS (preferred).

More like this

Similar roles

Lead InfoSec Engineer, Vulnerability Management

S&P Global

New York, NY 7 days ago $125,000–$145,000
Vulnerability Management DAST SAST Qualys Tanium Rapid7 Fortify Checkmarx Veracode Power BI Tableau NIST Cybersecurity Framework ISO 27001 CVE CVSS CWE CISSP CISM CEH GCIH
7+ yrs exp

Principal Security Software Engineer

Apple Inc

Seattle, WA 7 days ago $205,400–$374,300
Cloud Security Network Security Application Security Python Go Java infrastructure-as-code DevSecOps AWS GCP Azure Threat Modeling Vulnerability Management Security Architecture Secure Coding GDPR PCI-DSS HIPAA
10+ yrs exp

Manager, Security Engineering & Platforms

Cardinal Health

Remote 34 days ago
SIEM SOAR Cyber Defense Cloud Infrastructure Infrastructure as Code Scripting APIs Linux Networking Vulnerability Scanning Incident Response Security Orchestration Automation Disaster Recovery Security Monitoring
Remote

Senior Systems Engineer, Vulnerability Management

Neurocrine

San Diego, CA 54 days ago
AWS Azure Linux Windows Server Python Bash PowerShell Configuration Management Ansible AWS Systems Manager SSM) Patch Manager Vulnerability Management Patch Management ITIL ServiceNow GxP SOX Identity and Access Management OS Hardening Network Security Cisco Catalyst Center
4+ yrs exp