Staff Cloud Security Engineer

Warner Bros. Discovery; Silver Spring (MD); Hybrid; USD 115,780 - 215,020; Full time

Benefits offered by this job

Health insurance

Wellness program

Retirement savings plan

Paid holidays

Short and long-term incentives

Job summary

A leading media company in Silver Spring, MD is seeking a Cloud Security Engineer. This role focuses on securing cloud services across AWS, GCP, and Azure, implementing best practices, and managing security risks. Candidates should have 7+ years of experience, proficiency in Python, and a strong understanding of cloud security principles. The position requires hybrid work, with three days minimum in office, and offers competitive compensation and benefits including health insurance and retirement plans.

Qualifications

• 7+ years of experience as a Cloud Security Engineer or similar role.
• Strong knowledge of cloud environments, specifically AWS, GCP, and Azure.
• Proficiency in Python for automation and scripting.

Responsibilities

• Design and maintain security measures for cloud infrastructures.
• Secure containerized applications with Kubernetes best practices.
• Collaborate to integrate security within the software development lifecycle.

Skills

Cloud security architecture

AWS

GCP

Azure

DevSecOps principles

Python scripting

Kubernetes

Docker

CSPM platforms

Collaboration skills

Education

Bachelor’s degree in Computer Science or Information Security

Tools

AWS Security Engineer certification

GCP Security Engineer certification

Azure Security Engineer certification

Job description

Your New Role

We are seeking a Cloud Security Engineer with expertise in cloud security architecture, configuration, and governance across AWS, GCP, and Azure platforms, and subject‑matter expertise in container security. This role focuses on securing cloud services and infrastructure, implementing best practices for secure deployments, and proactively identifying and mitigating security risks across multiple cloud environments. The ideal candidate will have primary hands‑on experience with AWS, and strong familiarity with GCP and Azure.

Your Role Accountabilities

• Design, deploy, and maintain security measures to safeguard our cloud infrastructures across AWS, GCP, and Azure.
• Ensure the security of containerized applications through the implementation of Kubernetes and microservices security best practices.
• Architect secure container environments, including Kubernetes clusters, Docker setups, and orchestration solutions, emphasizing vulnerability reduction and compliance.
• Develop and enforce security policies, standards, and procedures for cloud environments and containerized workloads.
• Collaborate with cross‑functional teams to integrate security best practices into the software development lifecycle (SDLC) and continuous integration/continuous deployment (CI/CD) pipelines.
• Work with the incident response team to investigate and remediate cloud security incidents, providing expertise on cloud‑specific attack vectors and mitigation strategies.
• Automate security operations and workflows using scripting languages like Python.
• Develop and implement security automation solutions to continuously monitor cloud environments for compliance, threats, and performance anomalies.
• Conduct regular security assessments, vulnerability scans, and threat modelling for cloud environments; identify, evaluate, and mitigate risks in cloud infrastructure using automated and manual methods.
• Partner closely with DevOps teams to fortify container orchestration platforms and containerized workloads.
• Evaluate and recommend new tools, technologies, and methodologies to improve the organization’s cloud security posture; monitor and assess industry trends to ensure the program evolves with emerging threats and regulatory changes.
• Collaborate with the Project Execution Office (PEO) to create and maintain detailed project plans, timelines, and milestones.
• Maintain comprehensive documentation on cloud security processes, security controls, architecture diagrams, and risk assessments.
• Report security risks, incidents, and findings to leadership and relevant stakeholders.
• Collaborate with stakeholders to define project scope, deliverables, and expectations, ensuring alignment with business objectives.
• Leverage creativity and technical expertise to design novel security solutions that address complex cloud security challenges.
• Use advanced tools, AI, machine learning or custom scripts to anticipate future risks and mitigate them before they affect infrastructure.
• Investigate and implement innovative solutions such as AI‑driven threat detection, security automation tools, and machine learning models to enhance security operations and reduce manual workloads.
• Stay at the forefront of cloud security trends and emerging technologies (e.g., zero‑trust architecture, Quantum Cryptographs, Extended Detection & Response, User Behaviour Analytics, CSPM, CWP, Serverless Security) and creatively incorporate them into security practices.

Qualifications & Experience

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Minimum of 7 years of experience as a Cloud Security Engineer or similar role.
• In‑depth knowledge of AWS, GCP, and Azure.
• Proficiency in writing scripts and automation using Python.
• Strong understanding of DevSecOps principles and practices.
• Experience with CSPM platforms such as Wiz, Divvy Cloud, Prisma Cloud, Orca (Wiz preferred).
• Experience with Docker, Kubernetes, including securing Kubernetes clusters and containerized workloads.
• Proficient with productivity tools (Office 365, Atlassian, etc.).
• Excellent communication, presentation, and collaboration skills.
• Relevant security certifications (AWS Security Engineer, GCP Security Engineer, Azure Security Engineer) are a plus.
• Hybrid work environment; must be based in the WBD office, minimum of three days per week.

If You Are

• Excited to work in an international, fast‑paced, multi‑faced media company.
• Comfortable ensuring timely escalation, responsiveness, and follow‑through to meet deadlines.
• Knowledgeable of risk‑based business impact approach to cybersecurity.
• Actively questioning and influencing actions needed to attain goals and targets.
• Comfortable driving initiatives forward without having direct control of staff.

Benefits and Compensation

Pay Range: $115,780.00 – $215,020.00 per year. Other rewards may include annual bonuses, short‑ and long‑term incentives, and program‑specific awards. Additionally, Warner Bros. Discovery provides health insurance coverage, a wellness program, life and disability insurance, a retirement savings plan, paid holidays, sick time and vacation.

Championing Inclusion at WBD

Warner Bros. Discovery embraces the opportunity to build a workforce that reflects a wide array of perspectives, backgrounds and experiences. Being an equal‑opportunity employer means that we take seriously our responsibility to consider qualified candidates on the basis of merit, without regard to race, color, religion, national origin, gender, sexual orientation, gender identity or expression, age, mental or physical disability, and genetic information, marital status, citizenship status, military status, protected veteran status or any other category protected by law.

Accessibility

If you’re a qualified candidate with a disability and you require adjustments or accommodations during the job application and/or recruitment process, please visit our accessibility page for instructions to submit your request.