VP, Application Security

Welcome to Warner Bros. Discovery… the stuff dreams are made of.

Who We Are…

When we say, “the stuff dreams are made of,” we’re not just referring to the world of wizards, dragons and superheroes, or even to the wonders of Planet Earth. Behind WBD’s vast portfolio of iconic content and beloved brands, are the storytellers bringing our characters to life, the creators bringing them to your living rooms and the dreamers creating what’s next…

From brilliant creatives, to technology trailblazers, across the globe, WBD offers career defining opportunities, thoughtfully curated benefits, and the tools to explore and grow into your best selves. Here you are supported, here you are celebrated, here you can thrive.

Your New Role: 

The VP, Application Security is responsible for developing and implementing comprehensive strategies to protect applications and digital infrastructure from cyber threats and vulnerabilities. Reporting director to the SVP, you will lead a team of security professionals and work closely with cross-functional teams to ensure the integrity and security of software applications through the development lifecycle across WBD’s global environment.

Your Role Accountabilities: 

Strategy

• Develop and execute a robust application security strategy aligned with business objectives and industry best practices.
• Lead and mentor a team of application security professionals, providing guidance and support in assessing, prioritizing and mitigating security risks.
• Collaborate with software development teams to integrate security measures into the development lifecycle, including secure coding practices, code reviews and vulnerability assessments.
• Implement and manage security tools and technologies to proactively identify and address security vulnerabilities in our applications.
• Conduct regular security assessments and penetration testing of applications to identify and remediate potential weaknesses.
• Stay abreast of emerging threats and industry trends in application security, continuously enhance our security posture and practices.
• Develop and deliver comprehensive training programs to educate employees on application security best practices and awareness.
• Collaborate closely with internal stakeholders and external partners to ensure compliance with regulatory requirements and industry standards related to application security.
• Serve as a subject matter expert on application security matters, providing guidance and recommendations to senior leadership and other stakeholders.
• Collaborate with incident response teams to investigate and respond to security incidents related to applications, ensuring timely resolution and mitigation.

Qualifications

• Ten plus (10+) years’ experience in application security, with a proven history of leadership and success in developing and implementing security strategies.
• Strong technical expertise in application security principles, including secure coding practices, web application security and mobile application security.
• Domain competencies in IT-risk-related disciplines including Secure Code Hygiene, Application/Mobile/Native Automated and Manual Security Testing, and Applications Security Reviews.
• Experience with industry-standard security frameworks and regulations (OWASP, NIST, GDPR)
• Demonstrated experience leading and managing a team of security professionals with excellent communication and interpersonal skills.
• Experience working in a face-paced, dynamic environment, with the ability to adapt to evolving business needs and priorities.
• Relevant certifications, such as CISSP, CSSLP, or equivalent highly desirable.
• Strong analytical and problem-solving skills, with the ability to assess complex security issues and develop effective solutions.
• Proven ability to collaborate and build relationships with cross-functional teams and stakeholders at all levels of an organization.
• Strong communications skills and ability to interact/present application security projects and process improvements to Engineering Management.
• Strong project management and project facilitation skills
• Strong understanding of application development frameworks for web, mobile, and API-based applications  
• Hands-on experience working with DevOps and Agile-driven application teams. 
• Knowledge of cloud architecture and security principles  
• An ability to communicate complex and technical issues to diverse audiences.
• Scale security within the SDLC by automation using tools sets such as source code analyzers, vulnerability scanners, configuration validation, and similar techniques.
• Designing, testing, and implementing advanced enterprise level application security s