Warner Bros. Discovery
New York, NY
Hybrid

Sr Product Security Engineer

Sorry, this job was removed at 6:45 p.m. (EST) on Tuesday, May 19, 2020
Find out who's hiring in Greater NYC Area.
See all Cybersecurity + IT jobs in Greater NYC Area
Apply
By clicking Apply Now you agree to share your profile information with the hiring company.

Position Summary

The Application Security Engineer to work closely with Discovery’s Information Security and Direct-to-Consumer (DTC) teams to ensure that adequate security controls, SDLC processes, and testing is conducted on media consumer solutions.

 

Application Security Engineer will report to Director of Application who specializes in – and is accountable for – information security issues relevant to Direct-to-Consumer (D2C), customer-facing technologies, appropriate protection of user and customer information (e.g. GDPR, PCI, SOX), and retail consumer privacy. Application Security Engineer will assist with translation and review of execution of cyber security requirements, and help align requirements with Digital Platforms.

 

The Application Security Engineer will be knowledgeable in development processes with experience in developing secure applications. Applicant will have a key role in the development and implementation of a secure Software Development Life Cycle (SDLC). Applicant will drive the secure implementation of front-end web-based technologies on our platforms to support revenue and user growth for Discovery D2C digital products which include consumer-facing web sites, mobile applications, and content applications. Will provide technical support for D2C teams evaluating application security technologies and workflows across platforms, including D2C platforms, Discovery’s portfolio of TV Everywhere apps and products, Motor Trend, PGA streaming services, and the Eurosport Player – Eurosport being the leading provider of locally relevant, premium sports and Home of the Olympic Games across Europe. In addition, VP will have management responsibility for TVN Information Security – TVN being Discovery’s leading broadcaster in Poland.

Responsibilities

1. 24x7 on-call availability for Information Security issues across the globe
2. Develop and execute security assessment test plans, document and present results
3. Review developers’ codes, provide feedback and perform security and risk assessment for consumer-facing applications, services, and future technology
4. Perform design analysis, review, piloting, and selection of security technologies that meet specified application/business requirements, as needed
5. Identify and define application security requirements and security baselines for the various classes of assets and environments in use at Discovery or its partners
6. Work collaboratively across the organization (e.g., Technical Architects/Leads, Product managers, Digital Media Program Teams, etc.) to support and remediate security gaps
7. Review Technical Architecture and Delivery for Web and other Client Delivery Platforms
8. Work closely with the development teams within an agile development process to fix security issues identified in largescale user-facing web applications
9. Lead and mentor developers in utilize secure development techniques and libraries
10. Lead in the development and providing guidance during architecture and design activities of new and existing applications, while also conducting architectural risk and impact assessments on new and existing applications
11. Maintain knowledge of current and emerging secure application technologies/products/trends related to architectural solutions; actively and continuously share this knowledge with others
12. Communicate Findings/Remediation Guidance/Security Design Patterns to development teams in a concise and succinct manner
13. Increase knowledge in application security through self-study, training, and certifications.
14. Research and gather secure code specifications and requirements based on OWASP
15. Stay connected to emerging technologies/industry trends and apply them into operations and activities

Requirements

* 4+ years in managing Information Security global teams
* 4+ years of cybersecurity architecture/engineering and/or application security (appsec, netsec), with a Bachelor’s degree or higher in related field
* Must be fluent in English and if possible French or Polish
* Broad knowledge of IT Security technologies, process, and techniques and a strong understanding of application security leading practices including OWASP and CWE.
* Experience in secure code reviews, business logic assessment, and application security testing
* Experience deploying cybersecurity solutions in a public cloud environment (IaaS, PaaS, SaaS)
* Familiar with application security tools like BurpSuite Pro, SAST, DAST, nmap, Metasploit, and Kali Linux, etc. (Experience in 3rd-party testing tools such as Veracode, WhiteHat, etc. is also preferred)
* Experience managing secure coding and software deployment in a variety of current languages (e.g. Python, Node.js, C#, .NET, JavaScript, Go, Ruby, PowerShell, Bash, Scala, SDK and RESTful API design/development).
* Experience working with Agile development/Scrum methodologies, and incorporation of security requirements into SDLC (CI/CD) with product owners/managers
* Familiarity with HTML/CSS, JavaScript and UI/UX design and software quality assurance principles
* Excellent knowledge of software and application design and architecture
* Strong Knowledge of TCP/IP, DNS, HTTP, HTTPS, VPN, SQL and other database technologies
* Experience with Unix/Linux and Windows operating systems in an Active Directory environment
* Experience with endpoint security and SIEM technologies, e.g., Carbon Black, QRadar
* Experience working in large global environments
* Excellent communication and presentation abilities with great attention to detail
* CISSP, CEH, GWEB, CWAPT, CASS, SCADA, CCSP, CSSLP, CISSP-ISSAP or OSCP certifications are highly desired

* Must have the legal right to work in the United States

See More
Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.

What are Warner Bros. Discovery Perks + Benefits

Warner Bros. Discovery Benefits Overview

Warner Bros Discovery offers a comprehensive set of benefits and perks to support employees in their personal and professional lives. Some program highlights include:

• Local medical, dental, and vision programs in many countries around the world.
• On-site wellness and fitness centers across several of our office locations.
• Family support programs. In the U.S., additional services include on-site childcare in certain offices, backup childcare services, family caregiver leave, adoption, surrogacy, and cryopreservation assistance, and more.
• Tools and resources to support the mental wellbeing of our employees and their dependents, including mental health counselors and 24/7 access to free, confidential support through our Employee Assistance Program administrators.
• Products and services to support financial wellbeing including financial planning tools, and a 401(k) savings plan in the U.S.
• Flexible work arrangements around the globe, allowing employees to better balance work and personal commitments.
• Global learning, leadership & organization programs to inspire, equip, and empower our people to thrive. These programs and resources are accessible to everyone at whatever stage they are in their career.

Culture
Volunteer in local community
Partners with nonprofits
Open door policy
OKR operational model
Team based strategic planning
Open office floor plan
Employee resource groups
Employee-led culture committees
Hybrid work model
In-person all-hands meetings
Summer hours
Employee awards
Flexible work schedule
Remote work program
Diversity
Documented equal pay policy
Dedicated diversity and inclusion staff
Mandated unconscious bias training
Diversity manifesto
Diversity employee resource groups
Hiring practices that promote diversity
Diversity recruitment program
Health Insurance & Wellness Benefits
Flexible Spending Account (FSA)
Disability insurance
Dental insurance
Vision insurance
Health insurance
Life insurance
Pet insurance
Wellness programs
Team workouts
Mental health benefits
Transgender health care benefits
Wellness days
Abortion travel benefits
Financial & Retirement
401(K)
401(K) matching
Company equity
Employee stock purchase plan
Performance bonus
Charitable contribution matching
Pay transparency
Child Care & Parental Leave Benefits
Childcare benefits
Generous parental leave
Family medical leave
Adoption Assistance
Company sponsored family events
Fertility benefits
Vacation & Time Off Benefits
Unlimited vacation policy
Paid volunteer time
Sabbatical
Paid holidays
Paid sick days
Flexible time off
Bereavement leave benefits
Company-wide vacation
Office Perks
Commuter benefits
Free snacks and drinks
Company-sponsored happy hours
Onsite office parking
Relocation assistance
Home-office stipend for remote employees
Meditation space
Mother's room
Onsite gym
Professional Development Benefits
Job training & conferences
Tuition reimbursement
Lunch and learns
Promote from within
Mentorship program
Continuing education stipend
Online course subscriptions available
Customized development tracks
Paid industry certifications
Personal development training
Virtual coaching services

More Jobs at Warner Bros. Discovery

Apply Now
By clicking Apply Now you agree to share your profile information with the hiring company.
Learn more about Warner Bros. DiscoveryFind similar jobs like this