Overall Purpose: This career step requires career level experience. Responsible for review and analysis of security requirements, works with senior team members to develop integrated plans to protect corporate assets and information technology, and administers security systems to support daily security operations. Assess overall security risk of systems, prioritizes and leads activities to lower AT&Ts overall security risk posture.

Key Roles and Responsibilities: Includes researching, recommending, documenting, and coordinating implementation of changes to policies, procedures, facilities, and systems to enhance security as well as developing and delivering corporate security awareness training for users and technical security training for system administrators. Facilitates compliance with company security policies, practices and legal requirements. May provide support to non-management employees, including coaching, on-the-job and formal training, reference materials, procedures and system documentation. Provides information to management regarding the negative impact on the business caused by theft, destruction, alteration or denial of access to information. May interface with other stakeholders including vendors, application development and technical support staff, and clients. May provide inventory and asset management resources to security operation, including administrative supplies, security specific resources such as SecurID cards or cryptographic key management, and specialized security software. May perform some Cyber Security duties.

This position will conduct application security assessments. The position will also develop, with other team members, the necessary core processes to execute security architecture reviews in a manner consistent with the needs of the WarnerMedia brands. Finally, this position will review security architecture artifacts commensurate with their level of experience and make initial recommendations to leadership.

This position will be responsible for:

60% Participate in application security reviews by: a. Working with WarnerMedia to ensure business drivers for security are properly accounted for b. Reviewing with system and application owner’s security attributes c. Reviewing risk and opportunity models based on drivers and attributes d. Reviewing and advise on inter-domain policy relationships for systems/applications and WarnerMedia’s corporate network e. Work with WarnerMedia to ensure business drivers for security are properly accounted for f. Review with system and application owner’s security attributes g. Review risk and opportunity models based on drivers and attributes h. Review and advise on inter-domain policy relationships for systems/applications and WarnerMedia’s corporate network i. Ensure system/application designs adhere security policies and standards j. Review documented information and data flows at the macro level k. Coordinate the onboarding, ingesting, and shepherding of systems/applications through the architecture review process Ensure system/application designs adhere security policies and standards

20% Participate in projects, planning, controlling, executing and closing assigned projects to produce required deliverables.

20% Assist in the development of a security architecture review process that is adaptable and resilient using industry standard frameworks.

Training/Special Skills:

Minimum three(3) years of experience in Information and Network Securitya

Job Contribution: Technical professional with some experience. Sound technical knowledge growing through application, expanding knowledge of ATT technologies.

Education: Associates of Science degree in the field of Computers, Engineering, or Mathematics preferred.

Experience: Typically requires 2- 3 years experience. Technical Career Pathway (TCP) role.

Supervisory: No.