Tech Security Engineer
Role Overview
We are currently seeking a Tech Security Engineer to join UMG’s global Tech Security & Identity organization.
Reporting to the IT Security Manager, this role is a hands-on engineering position focused on improving the security posture of UMG’s applications, platforms, and cloud environments.
This engineer will play a critical role in embedding security into the software development lifecycle by performing application security assessments, supporting vulnerability management, and partnering with engineering teams to remediate risk.
While this role spans multiple areas of security engineering, it has a strong emphasis on application and product security, including secure design, code review, and modern web security practices.
The ideal candidate brings a solid foundation in application security and software development, combined with experience in cloud environments and modern security tooling.
This role requires both technical depth and the ability to collaborate effectively across engineering, infrastructure, and security teams.
Key Skills for This Role
Full Job Posting
Job Requirements
- Essential Qualifications
- 3–6 years of experience in Security Engineering, Application Security, or Software Engineering.
- Strong understanding of application security concepts, including OWASP Top 10 and common web vulnerabilities.
- Experience with web technologies, APIs, and modern application architectures.
- Hands-on experience with security testing tools (e.g., Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode, or similar).
- Experience with authentication and federation protocols (e.g., SAML, OAuth 2.0, OpenID Connect).
- Familiarity with at least one programming or scripting language (e.g., Python, JavaScript, Java, or similar).
- Experience working in cloud environments (AWS, Azure, or GCP).
- Strong analytical and problem-solving skills with the ability to assess and communicate risk.
- Ability to work collaboratively with engineering teams to drive remediation and improve security outcomes.
- Desirable Qualifications
- Experience integrating security into CI/CD pipelines and DevOps workflows.
- Familiarity with containerization and cloud-native technologies (Docker, Kubernetes).
- Exposure to IAM concepts such as SSO, identity federation, and access control models.
- Understanding of security frameworks and standards (e.g., OWASP ASVS, NIST, ISO 27001).
- Relevant certifications such as Security+, CEH, CSSLP, or similar.
- Experience in large-scale, global, or regulated enterprise environments.
- Technology
Job Category:
Technology
About Universal Music Group
Public Dutch music-entertainment company producing and publishing recorded music, merchandise, and audiovisual content for artists and audiences.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Universal Music Group
Unified Communications Engineer
London, GBR
Universal Music Group is seeking a Unified Communications Engineer to own infrastructure project delivery, with a focus on enterprise AV deployments and migrations. The role covers AV standards, room design and installat
Senior Director, Finance Insights and Reporting
Santa Monica, USA
Executive Assistant
Santa Monica, USA
Manager, Strategic Analytics
Santa Monica, USA
Manager, Artist Relations
Los Angeles, USA
Administrative Assistant
Santa Monica, USA
Unified Communications Engineer
London, GBR
Senior Manager, Production
Los Angeles, USA
Customer Support Specialist
, USA