Principal, Security Engineering & Vulnerability Management for WB Games

The Principal, Security Engineering & Vulnerability Management for WB Games is a key leadership role within the Global Information and Content Security (GICS) team, implementing WBD's security strategy, policies and standards across global WB Games operations. The role drives the security of technical and digital operations and maintains a strategic relationship with WB Games leadership, closely aligning WBD's cybersecurity strategy with the evolving WB Games strategy. The position works across security adoption, vulnerability and threat management, and secure development in partnership with studio, engineering and centralised security teams.

• Act as the primary link between WB Games and WBD's centralised cybersecurity functions, ensuring security initiatives are aligned with business goals and priorities.
• Lead the adoption and enforcement of Global Information and Content Security policies and standards across WB Games business lines.
• Partner with GICS leadership to drive adoption of core security services — Identity and Access Management, Logging and Monitoring, Detection and Response, Vulnerability Management, Product Security, Cloud Security and Content Security — throughout global WB Games operations.
• Provide direction and supervision on security-related projects and initiatives, ensuring compliance with global security standards and best practices.
• Support enterprise and business-line regulatory and compliance requirements, developing implementation strategies that minimise operational impact and disruption.
• Foster a strong security culture and promote awareness, accountability and technical security measures across WBD's global WB Games functions.
• Lead the identification and reporting of key risk indicators (KRIs) for WB Games operations, driving analytics, metrics and executive-level reporting to WBD leadership.
• Drive vulnerability and threat remediation at scale across internet-facing and internal WB Games assets, partnering with engineering owners to prioritise exposures and reduce time-to-remediate.
• Support security operations and incident response teams in the identification, investigation and mitigation of cybersecurity incidents impacting WB Games.
• Evaluate and recommend security solutions and tools that strengthen WB Games' detection, response and remediation capabilities.
• Handle security exceptions for global WB Games operations, ensuring proper documentation, approval, risk acceptance and periodic review.
• Partner with WB Games engineering and studio teams to integrate security throughout the software development lifecycle across GitHub and Perforce-based workflows.
• Drive adoption of secure development tooling and controls — including SAST, DAST, secrets management, dependency scanning, branch protections and CI/CD guardrails — embedded directly into developer pipelines.
• Champion secure-by-design principles and threat modelling across game studios, live-service platforms and online services.
• Lead application and product security reviews for new game launches, major releases and live-service features prior to public exposure.

• Executive presence, technical security expertise, business acumen, communication skills and alignment focus.
• Bachelor's degree in computer science, engineering or another related discipline preferred, or 10+ years of previous technical security experience.
• 10+ years of supervisory or management experience in a technical security environment.
• Strong technical engineering background, with the ability to engage credibly with software, infrastructure and platform engineering teams on architecture, code and operational decisions.
• Demonstrated experience securing the software development lifecycle, including hands-on familiarity with source control and build platforms used in games and media production, particularly GitHub and Perforce, and the ability to embed security controls (SAST/DAST, secrets management
• Branch protections, CI/CD guardrails) directly into developer workflows.
• Proven track record in vulnerability and threat remediation at scale, prioritising exposures, driving root-cause fixes with engineering owners and reducing time-to-remediate for both internet-facing and internal assets in fast-moving threat environments.
• Proficiency in the technical aspects of cyber security, including cloud infrastructure and concepts and their security aspects, application security topics such as the OWASP Top 10, SIEM and logging tools, vulnerability management and EDR/XDR toolsets, network and compute architectures
• And Identity & Access Management and Privileged Access Management.
• Solid knowledge of various regulatory requirements and information security control frameworks (ISO, NIST, PCI, GDPR, CCPA, SOX).
• Strong understanding of audit/risk management methodologies and regulatory requirements pertaining to information security, privacy and/or data security.
• Hands-on experience with security practices such as security incident response and risk management.
• Exceptional verbal and written communication skills, specifically the ability to communicate within the context of the intended audience, whether senior executives or highly technical engineering resources.
• Good understanding of industry trends and emerging threats.
• Experience in leading projects leveraging global teams with matrix resources.

• Experience in providing cybersecurity services and modelling for media, broadcast and entertainment companies.
• Security certifications are a plus (CISSP, CISM, CISA, SANS, etc.).

• Hybrid schedule, working 3 days onsite out of the NYC or Burbank office.

• Actual salaries will vary based on a variety of job-related factors, including but not limited to geographic location, external market data, internal equity, skill set, experience, training, education and/or performance.

• Base pay is one component of the total compensation package; other rewards may include annual bonuses, short- and long-term incentives and program-specific awards.
• Health insurance coverage.
• Employee wellness program.
• Life and disability insurance.
• Retirement savings plan.
• Paid holidays, sick time and vacation.