Perimeter Security Engineer

About the role

The WAF Perimeter Security Engineer is a critical technical role responsible for securing WBD's global edge infrastructure through advanced WAF and DDoS protections.

Responsibilities

• Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties.
• Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS mitigation security policies.
• Perform log analysis to identify malicious traffic patterns, false positives, and opportunities for tuning.
• Contribute to automation efforts (infrastructure as code, CI/CD integrations, scripts) to deploy and maintain security configurations.
• Identify security vulnerabilities and guide developers and engineers in addressing these issues.
• Participate in on-call rotation as a subject matter expert for WAF/DDoS incident response.
• Partner with product, engineering, and operations teams to integrate WAF/Edge security controls into applications and services.
• Research and stay current on the latest attack vectors, vulnerabilities, and exploits affecting web and API applications.
• Recommend and implement improvements to strengthen defenses across the edge/perimeter layer.

Qualifications & Experiences

• 3+ years of experience working with, configuring, and maintaining web application firewalls (WAF), including troubleshooting, rule development and deployment.
• Knowledge of web application attack techniques and common vulnerabilities (i.e. OWASP Top 10).
• Proven expertise with at least one major WAF platform (Akamai, Fastly NGWAF, AWS WAF, Azure, or similar).
• Familiarity with log analysis tools, scripting (Python, Bash, PowerShell), and automation frameworks.
• Proven hands-on experience engineering across one of the various Cloud Providers (AWS, GCP, Azure).
• Strong problem-solving skills with the ability to quickly analyze issues and implement effective mitigations.
• Excellent collaboration and communication skills across security, engineering, and product teams.

Not Required but preferred experience

• Security certifications - CISSP, CISM, CISA, SANS, etc.
• Amazon certifications – Solutions Architecture Associate, Cloud Partitioner.
• Experience with infrastructure-as-code (Terraform, CloudFormation) for WAF/DDoS deployment.
• Familiarity with CDN integrations and API Security frameworks.
• Exposure to DDoS mitigation at scale, including volumetric and application-layer attacks.

Benefits

Warner Bros. Discovery provides a variety of benefits to employees, including health insurance coverage, an employee wellness program, life and disability insurance, a retirement savings plan, paid holidays and sick time and vacation.

Pay

$91,000.00 - $169,000.00 salary per year.

Schedule

Must work a hybrid schedule (3 days onsite) out of our Atlanta, DC, or Silver Spring office.