Application Security Engineer: Threat & Cloud Defender

Universal Music Group; City Of London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Universal Music Group seeks an experienced security professional to lead vulnerability management across our global infrastructure. You will identify risks, coordinate remediation, and ensure secure cloud and on‑premises environments, including compliance with data retention and incident response.

Ideal candidate has hands-on experience with vulnerability tools, cloud security, and cross‑functional collaboration to protect critical data and systems in a fast‑paced entertainment industry setting.

Qualifications

• 3+ years of hands-on experience in vulnerability management, remediation, or related cybersecurity roles.

Responsibilities

• Demonstrate ability to anticipate security issues, identify risks, and remediate without constant supervision.
• Prioritize vulnerabilities by risk, classify by impact and business context.
• Drive resolution within 60 days of identification.
• Administer Veritas eDiscovery and Cortex XDR platforms for security operations.
• Ensure data retention policy compliance and assist legal/compliance with data requests.
• Collaborate with internal teams and third parties to secure cloud and server infrastructure.
• Maintain documentation and knowledge of key technologies and risks.
• Communicate risk and remediation requirements to technical and non-technical stakeholders, including leadership and auditors.
• Automate vulnerability reporting and remediation processes to improve efficiency.
• Participate in incident response and on-call rotations outside normal hours.

Skills

Vulnerability management

Incident response

AWS & Azure security

Patch management

Windows/Linux/macOS admin

Python

PowerShell

Communication

On-call support

Education

Bachelor in Computer Science or Engineering

CISSP

CISA

Security+

ITIL Foundation

Tools

Nessus

Qualys

Tenable

OpenVAS

Veritas eDiscovery

VMware Tanzu

CloudHealth

Job description

Universal Music Group seeks an experienced security professional to lead vulnerability management across our global infrastructure. You will identify risks, coordinate remediation, and ensure secure cloud and on‑premises environments, including compliance with data retention and incident response.

Ideal candidate has hands-on experience with vulnerability tools, cloud security, and cross‑functional collaboration to protect critical data and systems in a fast‑paced entertainment industry setting.