Information Security Engineer

America's most successful premium television company, Home Box Office delivers two 24-hour pay television services HBO®and Cinemax®. HBO continues to take advantage of the latest technological innovations with advancements that include the availability of HBO programming online though HBO GOSM and MAX GOSM, as well as HBO On Demand® and Cinemax On Demand® in HD.

We are looking for an Information Security Engineer who will lead a significant program in an area such as vulnerability management or third party/vendor risk. We frequently collaborate with other teams at HBO, and look externally to partner with unique and innovative security companies.

* Perform design and implementation security reviews for different parts of the HBO ecosystem * Determine technical solutions to address security weaknesses and work with relevant stakeholders to implement them * Propose and evaluate innovative new security features that could benefit our users * Assist with security incident response as needed * Find security flaws hidden deeply in complex protocols and systems across the software stack

**What we're looking for:** * Expertise in conducting web and mobile security assessments covering threat modeling, design reviews and in-depth implementation audits * A burning desire to grow in both engineering and security expertise * 5 years of experience working in web security, mobile security, penetration testing and cryptography * Demonstrated proficiency in software development in C, C++ or Java * 2+ years of industry experience in security and development * Strong ability to conduct fuzzing against unfamiliar protocols and code * Proficiency in implementing sandboxing solutions * Development experience (Python, Perl, shell scripting, or similar) and experience with Amazon Web Services (AWS) is strongly preferred. **Required Skills** * BS in Computer Science or a related technical field or equivalent experience * Strong grounding in information security principles * 5+ years of hands-on experience leading a comprehensive security program (vulnerability management, vendor security, etc.) * Hands-on endpoint system security experience * Proven track record of building complete security solutions by integrating off-the-shelf and custom security tools through APIs * The ability to absorb and adapt to new technologies * Strong communication skills * Strong ability to troubleshoot * Willingness to take ownership and set direction in “gray” areas