Sr. Waf Security Engineer [Remote]

<p> Who We Are…<br /> <br /> When we say, ''the stuff dreams are made of,'' we're not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD's vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what's next…<br /> <br /> From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.<br /> <br /> *Must work a hybrid schedule (3 days onsite) out of our Atlanta, DC, or Silver Spring office.*<br /> <br /> Your New Role:<br /> <br /> As a Senior WAF Security Engineer - Edge/Perimeter, the ideal candidate is expected to:<br /> • Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties.<br /> • Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS mitigation security policies.<br /> • Perform log analysis to identify malicious traffic patterns, false positives, and opportunities for tuning.<br /> • Contribute to automation efforts (infrastructure as code, CI/CD integrations, scripts) to deploy and maintain security configurations.<br /> • Identify security vulnerabilities and guide developers and engineers in addressing these issues<br /> • Participate in on-call rotation as a subject matter expert for WAF/DDoS incident response.<br /> • Partner with product, engineering, and operations teams to integrate WAF/Edge security controls into applications and services.<br /> • Provide technical guidance on perimeter security best practices within SDLC and cloud-native environments.<br /> • Research and stay current on the latest attack vectors, vulnerabilities, and exploits affecting web and API applications.<br /> • Recommend and implement improvements to strengthen defenses across the edge/perimeter layer.<br /> <br /> Your Role Accountabilities:<br /> <br /> Implement, configure, and maintain WAF/DDoS solutions. Develop and tune custom firewall rules, bot mitigation, and DDoS protections. Perform log and traffic analysis to identify malicious activity and optimize defenses.<br /> <br /> Partner with product, engineering, and operations teams to integrate WAF/Edge security into applications and services. Provide guidance on best practices and support cross-team adoption of WAF/DDoS protections.<br /> <br /> Advise technology teams and management of identified risks and treatment options. Define or revise security elements, standards, and solutions for various technologies to achieve optimal security posture while delivering on business goals<br /> <br /> Research emerging threats and adapt defenses. Recommend enhancements to strengthen edge / WAF posture. Contribute to automation and infrastructure-as-code efforts to scale deployments.<br /> <br /> Participate in Tentpole and product/feature launches in a WAF support role<br /> <br /> Incident Response - Serve as an escalation point during WAF/DDoS incidents. Participate in on-call rotation to provide subject matter expertise in real-time investigations and mitigation.<br /> <br /> Qualifications & Experiences:<br /> • Bachelor's degree in Computer Science, Information Security, or equivalent work experience.<br /> • 5+ years of experience in application or network security with direct hands-on work in WAF/DDoS solutions.<br /> • Detailed understanding of the threats faced directly to consumer and digital platform organizations.<br /> • Proven expertise with at least one major WAF platform (Akamai, Fastly NGWAF, AWS WAF, Azure, or similar).<br /> • Practical experience writing/modifying WAF rules (e.g., AWS WAF, Azure or Cloudflare custom rules).<br /> • Experience with one of the major Cloud Providers SDK (BOTO3, Azure SDK, GCP Client Libraries) - AWS BOTO3 Preferred.<br /> • Strong understanding of HTTP/S protocols, OWASP Top 10, and API security models.<br /> • Proficiency with log analysis tools, scripting (Python, Bash, PowerShell), and automation frameworks.<br /> • Proven hands-on experience securing application across various Cloud Providers (AWS, GCP, Azure)<br /> • Strong problem-solving skills with the ability to quickly analyze issues and implement effective mitigations.<br /> • Excellent collaboration and communication skills across security, engineering, and product teams.<br /> <br /> Not Required but preferred experience:<br /> • Security certifications - CISSP, CISM, CISA, SANS, etc. Is a plus<br /> • Experience with infrastructure-as-code (Terraform, CloudFormation) for WAF/DDoS deployment.<br /> • Familiarity with CDN integrations and API Security frameworks<br /> • Exposure to DDoS mitigation at scale, including volumetric and application-layer attacks.<br /> <br /> Championing Inclusion at WBD<br /> Warner Bros. Discovery embraces the opportunity to build a workforce that reflects a wide array of perspectives, backgrounds and experiences. Being an equal opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, mental or physical disability, and genetic information, marital status, citizenship status, military status, protected veteran status or any other category protected by law.<br /> <br /> If you're a qualified candidate with a disability and you require adjustments or accommodations during the job application and/or recruitment process, please visit our accessibility page for instructions to submit your request.<br /> <br /> In compliance with local law, we are disclosing the compensation, or a range thereof, for roles in locations where legally required. Actual salaries will vary based on several factors, including but not limited to external market data, internal equity, location, skill set, experience, and/or performance. Base pay is just one component of Warner Bros. Discovery's total compensation package for employees. Pay Range: $105,280.00 - $195,520.00 salary per year. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Warner Bros. Discovery provides a variety of benefits to employees, including health insurance coverage, an employee wellness program, life and disability insurance, a retirement savings plan, paid holidays and sick time and vacation.<br /> <p id='jobcode'>Jobcode: Reference SBJ-12yjox-122-183-40-54-42 in your application.</p> </p>

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...