Sr. Cybersecurity Engineer

Warner Bros. Discovery•Silver Spring, MD

1d•Hybrid

About The Position

The WBD Security Engineering team empowers the WBD Global Information and Content Security (GICS) organization by supporting Security Engineering, Security Architecture, Threat Detection & Response, and other security functions through the deployment, management, and evolution of scalable, resilient, and intelligent security platforms. The Sr. Cybersecurity Engineer plays a key role in advancing WBD’s security capabilities by ensuring modern security tools, processes, and automation frameworks are effectively designed, implemented, and maintained. This role will focus on Endpoint Detection & Response (EDR), SIEM, and emerging AI-driven security capabilities, with an emphasis on building a more intelligent and automated security ecosystem. The ideal candidate will have strong experience with SentinelOne (or comparable EDR platforms), Splunk (or similar SIEM tools), and hands-on exposure to AI/ML and generative AI technologies, including the ability to leverage vendor-native AI features and build custom automation or AI-driven solutions to enhance threat detection, investigation, and response.

Requirements

5+ years of hands-on experience with enterprise security platforms (EDR, SIEM, SOAR)
Strong experience with SentinelOne (or similar EDR solutions)
Experience with Splunk or other SIEM platforms in large-scale environments
Hands-on experience with AI/ML, generative AI, or security automation use cases
Experience building or integrating AI-driven workflows, scripts, or agents is highly desirable
Proficiency in scripting (Python or similar) for automation and integrations
Experience with cloud environments (AWS, Azure, GCP) and security integrations
Strong understanding of security architecture, threat detection, and incident response
Familiarity with compliance and regulatory frameworks

Nice To Haves

Security certifications (e.g., CISSP)
Splunk certifications or equivalent SIEM expertise
Experience with SOAR platforms and automation frameworks
Exposure to AI/ML frameworks, LLMs, or security-focused AI tooling

Responsibilities

Plan, design, engineer, and implement enterprise security technologies with a focus on EDR, SIEM, and AI-driven security capabilities
Build, manage, and optimize enterprise security platforms, including SentinelOne and Splunk (or equivalent tools)
Integrate AI and automation into security operations to improve detection, response, and remediation workflows
Identify opportunities to enhance the organization’s overall security posture through modern tooling and intelligent automation
Lead the design, deployment, and optimization of SentinelOne (or similar EDR platforms)
Develop and tune detection rules, behavioral analytics, and response mechanisms
Investigate endpoint threats and improve response playbooks and automation
Ensure endpoint visibility, coverage, and resilience across environments
Design and maintain SIEM solutions to support centralized logging, monitoring, and alerting
Ingest and normalize data from diverse sources (endpoints, network, cloud, applications)
Develop dashboards, alerts, and detection use cases to support SOC operations
Optimize performance, scalability, and cost-efficiency of SIEM platforms
Leverage built-in AI capabilities within security tools (EDR, SIEM, SOAR, etc.)
Design and implement AI-driven workflows, including the use of generative AI and AI agents for threat analysis, triage, and response
Build or integrate automation using scripting (Python, APIs) and orchestration tools
Evaluate and pilot emerging AI/ML security technologies to enhance detection and response
Collaborate with SOC, engineering, and infrastructure teams to integrate security tools across the enterprise
Conduct security assessments and continuously improve detection and response capabilities
Troubleshoot and resolve complex platform and integration issues
Develop documentation, standards, and operational procedures
Mentor junior engineers and promote knowledge sharing across teams