Umusic
Application Security Engineer
Nashville, Tennessee
Sponsorship not specifiedDetected 6 days ago
PythonPowerShellGitAWSGCPAzureCloud PlatformsKubernetesCI/CDDevOpsRESTOAuthCybersecurityPenetration TestingMicrosoft DefenderCommunicationCollaborationProblem SolvingBurp SuiteCISSP
About the role
- This role combines hands-on technical expertise with collaboration across development and security teams to strengthen UMG's application security posture while enabling innovation.
- Disclaimer: This job description only provides an overview of job responsibilities that are subject to change.
- For more information, please click on the following links.
Responsibilities
- We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries.
- We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.
Requirements
- Support investigation and remediation of application-layer security incidents and vulnerabilities when required.
- Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
- 5+ years of experience in Application Security, Security Engineering, Software Engineering, or a related discipline with a security focus.
- Experience performing application security assessments, threat modeling, and secure architecture reviews.
- Strong understanding of secure coding principles and common application vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.
- Experience with application security testing technologies including SAST, DAST, SCA, API security testing, and penetration testing methodologies.
- Experience working with modern application architectures, REST APIs, microservices, and cloud-native technologies.
- Experience integrating security into CI/CD pipelines and DevSecOps workflows.
- Experience working within AWS, Azure, or Google Cloud Platform environments.
- Knowledge of modern authentication and authorization technologies including OAuth, OpenID Connect (OIDC), SAML, and JWT.
Benefits
- Comprehensive medical, dental, and vision coverage
- Including 100% coverage for out-patient in-network mental health services
- Fertility coverage for eligible medical plan participants
- Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)
- Student Loan Repayment Assistance and Tuition Reimbursement
- 401(k) with 100% immediate vesting on the first 5% of your contributions, plus an additional UMG contribution
- Flexible Paid Time Off (PTO) for exempt employees
- 3-weeks PTO for non-exempt employees
- 10 Company Holidays (including Juneteenth and Wellbeing Day)
- Generous paid parental leave for every type of parent
Company info
- We are UMG, the Universal Music Group.
- We are the world's leading music company.
- In everything we do, we are committed to artistry, innovation and entrepreneurship.
Visa & Work Authorization
- Please note, UMG is not enrolled in E-Verify in California and New York, and cannot support employment of candidates whose employer must enroll in E-Verify, for example candidates on STEM-OPT.
This listing is sourced directly from Umusic's careers page and normalized into a canonical job model.