Sr. Security Engineer, WAF

Walmart • Atlanta, GA

74d

About The Position

Welcome to Warner Bros. Discovery… the stuff dreams are made of. Who We Are… When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next… From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive. *Must work a hybrid schedule (3 days onsite) out of our Atlanta, DC, or Silver Spring office.*

Requirements

• Bachelor’s degree in Computer Science, Information Security, or equivalent work experience.
• 5+ years of experience in application or network security with direct hands-on work in WAF/DDoS solutions.
• Detailed understanding of the threats faced directly to consumer and digital platform organizations.
• Proven expertise with at least one major WAF platform (Akamai, Fastly NGWAF, AWS WAF, Azure, or similar).
• Practical experience writing/modifying WAF rules (e.g., AWS WAF, Azure or Cloudflare custom rules).
• Strong understanding of HTTP/S protocols, OWASP Top 10, and API security models.
• Proficiency with log analysis tools, scripting (Python, Bash, PowerShell), and automation frameworks.
• Proven hands-on experience securing application across various Cloud Providers (AWS, GCP, Azure).
• Strong problem-solving skills with the ability to quickly analyze issues and implement effective mitigations.
• Excellent collaboration and communication skills across security, engineering, and product teams.

Nice To Haves

• Security certifications - CISSP, CISM, CISA, SANS, etc. is a plus.
• Experience with infrastructure-as-code (Terraform, CloudFormation) for WAF/DDoS deployment.
• Familiarity with CDN integrations and API Security frameworks.
• Exposure to DDoS mitigation at scale, including volumetric and application-layer attacks.

Responsibilities

• Implement, configure, and maintain enterprise-grade WAF and DDoS protections across a large portfolio of properties.
• Develop and fine-tune custom firewall rules, bot mitigation controls, and DDoS mitigation security policies.
• Perform log analysis to identify malicious traffic patterns, false positives, and opportunities for tuning.
• Contribute to automation efforts (infrastructure as code, CI/CD integrations, scripts) to deploy and maintain security configurations.
• Identify security vulnerabilities and guide developers and engineers in addressing these issues.
• Participate in on-call rotation as a subject matter expert for WAF/DDoS incident response.
• Partner with product, engineering, and operations teams to integrate WAF/Edge security controls into applications and services.
• Provide technical guidance on perimeter security best practices within SDLC and cloud-native environments.
• Research and stay current on the latest attack vectors, vulnerabilities, and exploits affecting web and API applications.
• Recommend and implement improvements to strengthen defenses across the edge/perimeter layer.

What This Job Offers

• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 11-50 employees