Senior WAF Security Engineer

Warner Bros. Discovery

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Atlanta, GAWashington, DCSilver Spring, MD
Employment
Full-time
Posted
70 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $186k
$137k $234k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $154,450–$217,500.

Based on 240 similar postings.

Employer

About Warner Bros. Discovery

Warner Bros. Discovery is a global media and entertainment company operating a broad portfolio of iconic content and brands including Warner Bros. film studio, HBO, CNN, Discovery Channel, and Max streaming service. Industry: Media & Entertainment

Warner Bros. Discovery currently has 58 open roles on FindRole.

Listed pay typically runs $132,300–$245,700 across 24 roles with salary data.

Most-posted roles

View all roles at Warner Bros. Discovery

At a glance

TL;DR · Senior WAF Security Engineer

The Sr. WAF Security Engineer joins the security team to implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties. This role involves developing custom firewall rules, bot mitigation controls, and DDoS security policies while performing log analysis to identify malicious traffic patterns. The engineer will contribute to automation efforts using infrastructure as code and CI/CD integrations to scale security configurations. Key responsibilities include identifying vulnerabilities, providing technical guidance on perimeter security best practices within cloud-native environments, and participating in an on-call rotation for incident response. Required skills include expertise with platforms like Akamai, Fastly NGWAF, or AWS WAF, proficiency in Python, Bash, or PowerShell, and experience with BOTO3, Azure SDK, or GCP Client Libraries to secure web and API applications.

What you'll do

  • Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties.
  • Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS mitigation security policies.
  • Perform log analysis to identify malicious traffic patterns, false positives, and opportunities for tuning.
  • Contribute to automation efforts using infrastructure as code, CI/CD integrations, and scripts to deploy security configurations.
  • Identify security vulnerabilities and guide developers and engineers in addressing these issues.
  • Participate in an on-call rotation as a subject matter expert for WAF/DDoS incident response.
  • Partner with product and engineering teams to integrate WAF/Edge security controls into applications and services.
  • Research emerging threats and recommend improvements to strengthen defenses across the edge and perimeter layer.

What we're looking for

  • Bachelor’s degree in Computer Science, Information Security, or equivalent work experience.
  • 5+ years of experience in application or network security with direct hands-on work in WAF/DDoS solutions.
  • Proven expertise with at least one major WAF platform such as Akamai, Fastly NGWAF, AWS WAF, or Azure.
  • Practical experience writing and modifying WAF rules for AWS WAF, Azure, or Cloudflare.
  • Experience with one of the major Cloud Provider SDKs (BOTO3, Azure SDK, or GCP Client Libraries) (AWS BOTO3 preferred).
  • Strong understanding of HTTP/S protocols, OWASP Top 10, and API security models.
  • Proficiency with log analysis tools, scripting (Python, Bash, PowerShell), and automation frameworks.
  • Proven hands-on experience securing applications across various Cloud Providers (AWS, GCP, Azure).
  • Security certifications such as CISSP, CISM, CISA, or SANS (preferred).
  • Experience with infrastructure-as-code (Terraform, CloudFormation) for WAF/DDoS deployment (preferred).
  • Familiarity with CDN integrations and API Security frameworks (preferred).
  • Exposure to DDoS mitigation at scale, including volumetric and application-layer attacks (preferred).

More like this

Similar roles

Senior Security Engineer

CoStar Group

Arlington, VA +1 120 days ago $115,000–$203,000
AWS Network Security SaaS Security AI Security Python PowerShell Terraform Azure DevOps NGFW CASB SSE infrastructure-as-code OAuth Routing Load Balancers Threat Modeling
5+ yrs exp Hybrid

Senior Security Engineer

Early Warning Services

Scottsdale, AZ +1 27 days ago $132,000–$165,000
Vulnerability Management Endpoint Security DLP Python Linux Windows Administration Networking Firewall SSL/TLS JavaScript PowerShell Packet Capture NAT Layer 2 Layer 3 CISSP CCNA CISA
5+ yrs exp Hybrid

Senior Security Engineer

Adobe

Lehi, UT +2 39 days ago
Entra ID Okta SailPoint Zero Trust RBAC ABAC M365 Slack GitHub Workday Google Python PowerShell Terraform CI/CD Teleport Vault SPIFFE SPIRE
5+ yrs exp

Senior Security Engineer

Adobe

Lehi, UT +2 39 days ago
Entra ID Okta SailPoint Zero Trust RBAC ABAC M365 Slack GitHub Workday Google Python PowerShell Terraform CI/CD Teleport Vault SPIFFE SPIRE
5+ yrs exp

Senior SW Engineer, AI Security

Visa

Ashburn, VA 18 days ago $118,700–$183,600
Python Java Go Rust LangChain LangGraph LlamaIndex Semantic Kernel AutoGen Docker Kubernetes CI/CD Splunk Elasticsearch Grafana Threat Modeling CUDA NVIDIA Technologies
2+ yrs exp Hybrid

Senior Network Security Engineer

SpaceX

Starbase, TX +2 12 days ago
Network Security Palo Alto Check Point Juniper Arista Firewalls eBGP ACLs IPsec TLS Web Application Firewall SIEM OSI Model Network Segmentation Routing Access Control
5+ yrs exp