Global Application Security & Vulnerability Engineer

Universal Music Group; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Universal Music Group is seeking an experienced Application Security Engineer to join our Vulnerability Management program in London. You will drive remediation of IT vulnerabilities across a global enterprise, communicate risk to stakeholders, and work with cloud and on-prem infrastructure to enhance security postures.

The role requires hands-on experience with vulnerability tools (Nessus, Qualys, Tenable, OpenVAS), Veritas eDiscovery, Cortex XDR, and a strong scripting background.

Qualifications

• 3+ years in vulnerability management or related cybersecurity roles.
• Experience with Veritas eDiscovery platforms and data retention compliance.
• Experience with Nessus, Qualys, Tenable or OpenVAS vulnerability tools.
• Strong patch management process knowledge.
• Experience in 24x7 production environments.
• Experience with AWS and Azure in an enterprise context.
• Strong communication skills with technical and non-technical stakeholders.

Responsibilities

• Identify and remediate security vulnerabilities; drive remediation within 60 days.
• Prioritize vulnerabilities by risk, system criticality, and business context.
• Administer Veritas eDiscovery platform and Cortex XDR.
• Ensure data retention policy compliance and assist with data requests.
• Collaborate with internal teams and external providers to secure cloud and server infra.
• Automate vulnerability reporting and remediation processes.
• Participate in incident response and on-call rotations.

Skills

Vulnerability management

Patch management

Cloud platforms (AWS/Azure)

Scripting (Python, PowerShell)

Linux/Windows administration

Vulnerability assessment tools

Communication with stakeholders

Incident response

Education

Bachelor’s Degree in Computer Science or Engineering

CISSP, CISA, or Security+ certification

Tools

Veritas eDiscovery

Cortex XDR

VMware Tanzu CloudHealth

Nessus

Qualys

Tenable

OpenVAS

Job description

Universal Music Group is seeking an experienced Application Security Engineer to join our Vulnerability Management program in London. You will drive remediation of IT vulnerabilities across a global enterprise, communicate risk to stakeholders, and work with cloud and on-prem infrastructure to enhance security postures.

The role requires hands-on experience with vulnerability tools (Nessus, Qualys, Tenable, OpenVAS), Veritas eDiscovery, Cortex XDR, and a strong scripting background.