Sr. SOAR Engineer

Welcome to Warner Bros. Discovery... the stuff dreams are made of.

Who We Are...

When we say, "the stuff dreams are made of," we're not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD's vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what's next...

From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.

Must work a hybrid schedule (3 days onsite) out of our Atlanta office.

• A technical engineer, with an extensive security operations background, who drives the SOAR development lifecycle, in support of the security operations teams.
• Strong understanding of SOAR playbook development and logic.
• Strong understanding of CSOC workflows.
• Write, test, and maintain automation scripts/workflows within SOAR platform.
• Author and maintain documentation for all scripts, integrations, and workflows.
• Design, implement, standardize, and maintain efficient and reusable Python code or other programming language.
• Review, test, debug, and resolve technical issues throughout all stages of Software Development Life Cycle
• Translate conceptual CSOCIR requirements into technical data and integration requirements for the SOAR platform.
• Deliver API solutions that streamline, simplify, and improve efficiencies for the CSOCIR teams as well as other enterprise Business Units.
• Design, test, and implement new playbooks for the cyber security operation center.
• Partner with CSOC/IR leadership to gather SOAR requirements, priorities, and enhancements.
• Partner with CSOC/IR teams to review the development of integrations, workflows, & scripts to ensure anticipated output is achieved.
• Implement technical modifications to integration, script, workflow based on feedback from product consumers.

• 5+ years of technical cybersecurity experience in Incident Response, Security Operations, Threat Intelligence, etc.
• Strong understanding of a variety of security tools and technologies (IDS/IPS, EDR, XDR, SIEM, Vuln Mgmt., etc.)
• Experience with scripting such as BASH, PowerShell, and Python.
• Strong RegEx/PCRE experience
• Ability to multi-task and prioritize work effectively.
• A track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.
• Demonstrated exceptional written and verbal communication skills.
• Excellent interpersonal skills and the ability to work effectively with people in a wide range of levels.
• Experience administering Amazon Web Services (AWS) and/or Microsoft Azure.
• Familiarity with infrastructure-as-code tools, such as Terraform or CloudFormation.
• Experience deploying and correlating threat intelligence and vulnerability management solutions.