Principal, Security Engineering & Vulnerability Management for WB Games

Description

The company is a global media and entertainment business with three segments: Studios, Direct-to-Consumer and TV Media.

This senior leadership role sits on the global information and content security team. You will set and drive security strategy, policies and standards across the games business.

You will be the main link between games leadership and central cybersecurity, keeping security work tied to games business goals and priorities as the games strategy changes.

You will work with talented teams that move quickly and collaborate to deliver results.

Responsibilities

• Lead the adoption and enforcement of global information and content security policies and standards across games business lines.
• Work with security leadership to roll out core security services across global games operations: identity and access management, logging and monitoring, detection and response, vulnerability management, product security, cloud security and content security.
• Direct and oversee security projects and initiatives, making sure they meet global standards and best practice.
• Build implementation plans for enterprise and business-line regulatory and compliance requirements that keep operational disruption to a minimum.
• Build a security culture across global games functions through awareness, accountability and technical controls.
• Own analytics, metrics and executive reporting on key risk indicators (KRIs) for games operations, reporting to central leadership.
• Drive vulnerability and threat remediation at scale across internet-facing and internal games assets, working with engineering owners to set priorities and cut time-to-remediate.
• Support security operations and incident response teams in finding, investigating and containing incidents that affect the games business.
• Assess and recommend security tools and solutions that improve detection, response and remediation.
• Manage security exceptions for global games operations, covering documentation, approval, risk acceptance and periodic review.
• Work with games engineering and studio teams to build security into the software development lifecycle in GitHub and Perforce workflows.
• Roll out secure development tooling and controls, including SAST, DAST, secrets management, dependency scanning, branch protection and CI/CD guardrails, inside developer pipelines.
• Promote secure-by-design principles and threat modeling across game studios, live-service platforms and online services.
• Lead application and product security reviews before new game launches, major releases and live-service features go public.

Requirements

• A bachelor's degree in computer science, engineering or a related discipline is preferred, or 10+ years of prior technical security experience.
• 10+ years of supervisory or management experience in a technical security environment.
• A strong engineering background, enough to discuss architecture, code and operational decisions credibly with software, infrastructure and platform teams.
• Hands-on experience securing the software development lifecycle, especially with GitHub and Perforce used in games and media production, and building SAST/DAST, secrets management, branch protection and CI/CD guardrails into developer workflows.
• A proven record of remediating vulnerabilities and threats at scale: prioritizing exposures, driving root-cause fixes with engineering owners and cutting time-to-remediate for internet-facing and internal assets in fast-moving threat environments.
• Proficiency in technical security, including cloud infrastructure and its security, application security (OWASP Top 10), SIEM and logging tools, vulnerability management and EDR/XDR tools, network and compute architectures, and identity and access management with privileged access management.
• Solid knowledge of regulatory requirements and control frameworks, including ISO, NIST, PCI, GDPR, CCPA and SOX.
• A strong grasp of audit and risk management methods and of regulations covering information security, privacy and/or data security.
• Hands-on experience with security incident response and risk management.
• Excellent verbal and written communication, adapted to senior executives or highly technical engineers, plus an understanding of industry trends and emerging threats.
• Experience leading projects with global teams and matrix resources.
• Extensive experience designing and implementing enterprise security solutions in a global context.
• You bring executive presence, deep technical security knowledge, business sense, strong communication and a focus on alignment.
• Nice to have: experience providing cybersecurity services and modeling for media, broadcast and entertainment companies.
• Nice to have: security certifications (CISSP, CISM, CISA, SANS, etc.) are a plus.

Conditions

Hybrid schedule with 3 days onsite, at the New York City or Burbank office.

Hiring salary range: $177,170.00 - $329,030.00 per year.

Actual pay varies with location, external market data, internal equity, skills, experience, training, education and performance.

Base pay is one part of total compensation. Other rewards may include annual bonuses, short- and long-term incentives and program-specific awards.

Applicants with an arrest or conviction record are considered under the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Benefits

• Health insurance coverage.
• Employee wellness program.
• Life and disability insurance.
• Retirement savings plan.
• Paid holidays, sick time and vacation.