Sr. SOAR Engineer

Warner Bros. Discovery•Atlanta, GA

28d•Hybrid

About The Position

Welcome to Warner Bros. Discovery… the stuff dreams are made of. Who We Are… When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next… From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive. Must work a hybrid schedule (3 days onsite) out of our Atlanta office. SOAR Engineer The WBD SOAR (Security Orchestration Automation and Response) Team empowers the WBD CSOC by maintaining our ticketing and SOAR platform. The Cybersecurity Security Operations Center provides 24/7/365 monitoring, detection, and response coverage for the entire WBD network infrastructure, web facing applications and endpoints. This position will support the CSOC by engineering security tool integrations, automations, scripts, and playbook content for the SOAR platform that will assist the CSOC\IR teams through more effective and efficient responses and investigative capabilities. Your Role Accountabilities… A technical engineer, with an extensive security operations background, who drives the SOAR development lifecycle, in support of the security operations teams.

Requirements

5+ years of technical cybersecurity experience in Incident Response, Security Operations, Threat Intelligence, etc.
Strong understanding of a variety of security tools and technologies (IDS/IPS, EDR, XDR, SIEM, Vuln Mgmt., etc.)
Experience with scripting such as BASH, PowerShell, and Python.
Strong RegEx/PCRE experience
Ability to multi-task and prioritize work effectively.
A track record of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating effectively.
Demonstrated exceptional written and verbal communication skills.
Excellent interpersonal skills and the ability to work effectively with people in a wide range of levels.

Nice To Haves

Experience administering Amazon Web Services (AWS) and/or Microsoft Azure.
Familiarity with infrastructure-as-code tools, such as Terraform or CloudFormation.
Experience deploying and correlating threat intelligence and vulnerability management solutions.

Responsibilities

Strong understanding of SOAR playbook development and logic.
Strong understanding of CSOC workflows.
Write, test, and maintain automation scripts/workflows within SOAR platform.
Author and maintain documentation for all scripts, integrations, and workflows.
Design, implement, standardize, and maintain efficient and reusable Python code or other programming language.
Review, test, debug, and resolve technical issues throughout all stages of Software Development Life Cycle
Translate conceptual CSOC\IR requirements into technical data and integration requirements for the SOAR platform.
Deliver API solutions that streamline, simplify, and improve efficiencies for the CSOC\IR teams as well as other enterprise Business Units.
Design, test, and implement new playbooks for the cyber security operation center.
Partner with CSOC/IR leadership to gather SOAR requirements, priorities, and enhancements.
Partner with CSOC/IR teams to review the development of integrations, workflows, & scripts to ensure anticipated output is achieved.
Implement technical modifications to integration, script, workflow based on feedback from product consumers.