Senior Security Engineer

Engineering · New York, United States · Remote possible

Job description

At Warner Music Group, we’re a global collective of music makers and music lovers, tech innovators and inspired entrepreneurs, game-changing creatives and passionate team members. Here, we know that each talent makes our collective bolder and brighter. 

Technology is one of the most important parts of our business. Whether it’s signing up new artists; ensuring we provide the right data to Spotify, YouTube, and other digital service providers; or helping artists use the latest AI tools and make thoughtful decisions with data-driven insights – technology plays an invaluable role in our success. The engineering team at Warner Music Group makes all of it a reality.

A little bit about our team: Global team of dynamic, creative and collaborative problems solvers working together to build highly secure and scalable solutions to drive innovation and operational excellence. This represents a technical and experienced position in the IT organization.  This position will be called upon to represent IT organizations by internal and external organizations.  An individual in this position is responsible for making the production systems more reliable by performing day-to-day operations including system monitoring, troubleshooting, problem identification, resolution and restore the following established and documented procedures and with minimal direction. This group is the digital thought and technology collective working with world class creative Media & Entertainment executives and their teams; acting as the trusted operators and strategic partners with them to deliver the best possible outcomes.

Why this could be your next big break: This is an opportunity to move the needle and make a significant impact within a large global enterprise. Responsibilities include coordinating projects and resources as new business offerings and technologies are developed and implemented within Warner Music Group. Requires excellent communication and technical skills, while working closely with all business units within Warner Music Group in determining design criteria and proof of concept as they relate to each business offering. Other functionality includes acting as engineering liaison to outside engineering entities, project budget management, and vendor management. Collaborate, design and implement ideas with business leaders from whiteboard to digital delivery and be a true partner with our business leaders. Recognize that as a Service Organization we’re there to partner and steward the organization to operate efficiency, drive revenue and manage risk.

Here you’ll get to: Develop and maintain a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology and threat drivers Develop security strategy plans and roadmaps based on sound enterprise architecture practices Participate in application and infrastructure projects to provide security-planning advice Work on DLP rules and tuning Investigate DLP issues  Integrate threat intelligence into day to day processes Validate security configurations, including firewalls, IPSs, WAFs and anti-malware/endpoint protection systems Perform regular vulnerability testing of enterprise services and applications, assess results, prioritize, and coordinate remediation efforts with colleagues Ability to leverage SIEM platform for conducting forensic security investigations and identifying potential indicators of compromise (IOCs).  Develop and use advanced, customized tools and scripts to enhance security assessments and proactive alerting Review all security reports and logs for unusual or anomalous activities  Review all existing and new security technologies, tools and services, and make recommendations to the broader infrastructure team Collaborates on critical IT projects to ensure that security issues are addressed throughout the project life cycle Participate in all information security related incident response activities Stay abreast of information security events, news, trends and evolving legislative/regulatory changes 

Rockstar candidates will be able to: 10+ years previous hands-on network administration using the following skills: Direct, hands-on experience or strong working knowledge of managing security infrastructure — e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM, DLP (Data Loss Prevention) and log management technology Experience managing and working with Security Operations Centers Implemented DLP solutions Implemented threat intelligence process and program Verifiable experience reviewing application code for security vulnerabilities Direct, hands-on experience or a strong working knowledge of vulnerability management tools Documented experience and a strong working knowledge of the methodologies to conduct threat-modeling exercises on new applications and services Modern Authentication Protocols- SAML, OAUTH Cryptography - Asymmetrical/Symmetrical encryption, hashing Scripting – PowerShell, Python, Bash, etc. Experience leading high profile security projects

It would be music to our ears if you also had: CI/CD pipeline DEVSECOPS experience Cloud experience (AWS/Azure) Regulations, Standards and Frameworks Payment Card Industry Data Security Standard (PCI-DSS) Sarbanes-Oxley General Data Protection Regulation (GDPR) NIST Cybersecurity Framework (CSF)

Why join us?  Warner Music Group is all about our people. We are one global company made up of the most knowledgeable, passionate, and creative people in our business. It is the mission of every member of the WMG team around the world to create a nurturing environment for artists, songwriters, and the people behind the music, every stage of their career. We strive to set WMG apart from the rest of the industry by embracing a philosophy of innovation that is part of our company's DNA.  Consider a career at WMG and be a part of one of the biggest forces in music today.