Application Security Engineer

Universal Music Group; City Of London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Universal Music Group seeks an experienced security professional to lead vulnerability management across our global infrastructure. You will identify risks, coordinate remediation, and ensure secure cloud and on‑premises environments, including compliance with data retention and incident response.

Ideal candidate has hands-on experience with vulnerability tools, cloud security, and cross‑functional collaboration to protect critical data and systems in a fast‑paced entertainment industry setting.

Qualifications

• 3+ years of hands-on experience in vulnerability management, remediation, or related cybersecurity roles.

Responsibilities

• Demonstrate ability to anticipate security issues, identify risks, and remediate without constant supervision.
• Prioritize vulnerabilities by risk, classify by impact and business context.
• Drive resolution within 60 days of identification.
• Administer Veritas eDiscovery and Cortex XDR platforms for security operations.
• Ensure data retention policy compliance and assist legal/compliance with data requests.
• Collaborate with internal teams and third parties to secure cloud and server infrastructure.
• Maintain documentation and knowledge of key technologies and risks.
• Communicate risk and remediation requirements to technical and non-technical stakeholders, including leadership and auditors.
• Automate vulnerability reporting and remediation processes to improve efficiency.
• Participate in incident response and on-call rotations outside normal hours.

Skills

Vulnerability management

Incident response

AWS & Azure security

Patch management

Windows/Linux/macOS admin

Python

PowerShell

Communication

On-call support

Education

Bachelor in Computer Science or Engineering

CISSP

CISA

Security+

ITIL Foundation

Tools

Nessus

Qualys

Tenable

OpenVAS

Veritas eDiscovery

VMware Tanzu

CloudHealth

Job description

Music is Universal
It’s the passionate and dedicated team at Universal Music who help make us the world’s leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.

Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.

We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email [e-mail].

Job Summary:

We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.

Job Functions:

• Demonstrate ability to anticipate security issues, identify emerging risks, and take initiative in vulnerability remediation without constant supervision. A track record of proactively addressing vulnerabilities and improving security processes is essential.

• Prioritize and classify vulnerabilities based on risk impact, system criticality, and business context.

• Drive resolution of identified vulnerabilities within 60 days of identification.

• Administer and maintain the Veritas eDiscovery platform, ensuring its availability, security and proper configuration.

• Administer and maintain Cortex XDR for endpoint detection and response.

• Ensure compliance with data retention policies and assist legal and compliance teams with data retrieval and analysis requests.

• Work with internal customers, teammates and 3rd party providers to ensure operational security of the cloud and server infrastructure.

• Maintain high quality process and procedure documentation.

• Maintain & enhance knowledge of key technologies and risks.

• Communicate risk and remediation requirements clearly to both technical and non-technical stakeholders, including leadership and external auditors.

• Automate the vulnerability reporting and remediation processes to improve efficiency and reduce manual intervention.

• Participate in incident response activities related to vulnerability exploitation and provide remediation guidance.

• Participate in on-call rotation to respond to critical security alerts and events. Work out of standard business hours will occasionally be required.

Job Requirements:

• 3+ years of hands‑on experience in vulnerability management, remediation, or related cybersecurity roles.

• 1-2 years of experience administering and maintaining Veritas eDiscovery platforms, including troubleshooting, upgrades and ensuring compliance with data retention requirements.

• Experience with common vulnerability assessment tools (e.g., Nessus, Qualys, Tenable, OpenVAS).

• Knowledge of patch management processes and tools.

• Must possess strong people skills and the ability to be both diplomatic and firm.

• Experience in highly available 24x7x365 production environment.

• Fluency in operating system administration and tools including: Microsoft, Mac OS X, Linux, Python, Powershell, etc.

• Proven experience with Amazon AWS and Microsoft Azure (Google Compute a plus) in an enterprise setting.

• Manage time well in a high-interrupt operational environment. Handle the details of several technical tasks simultaneously.

• Familiarity with VMware Tanzu CloudHealth.

• Appropriate professional certifications.

Education:

• Bachelor’s Degree in Computer Science or Engineering or closely related field or comparable education and experience.

• Certifications such as CISSP, CISA, Security+

• ITIL Foundation Certification strongly desired.

Just So You Know…

The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.

Job Category:

Universal Music Group