Application Security Engineer: Secure SDLC & Cloud

Universal Music Group; Nashville (TN); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

Fertility coverage

Wellbeing reimbursements

Job summary

Universal Music Group in Nashville is seeking an Application Security Engineer to join our global Tech Security & Identity organization. You will improve security of internal applications and cloud services by partnering with engineering, infrastructure, and product teams to embed security throughout the software development lifecycle.

The ideal candidate has hands-on experience with SAST/DAST, secure coding, cloud-native tech, and developer enablement, plus strong communication skills and a

Qualifications

• Bachelor's degree or equivalent practical experience in Computer Science, Information Security, Engineering, or related field.
• 5+ years of experience in Application Security, Security Engineering, Software Engineering, or related discipline with a security focus.
• Experience performing application security assessments, threat modeling, and secure architecture reviews.
• Strong understanding of secure coding principles and common application vulnerabilities including OWASP Top 10.
• Experience with SAST, DAST, SCA, API security testing and penetration testing methodologies.
• Experience with REST APIs, microservices, and cloud-native technologies.
• Experience integrating security into CI/CD pipelines and DevSecOps workflows.
• Experience in AWS, Azure, or Google Cloud Platform environments.
• Knowledge of OAuth, OIDC, SAML, and JWT.
• Understanding of OWASP, NIST CSF, and ISO 27001.

Responsibilities

• Perform application security assessments, threat modeling, and secure design reviews for internally developed and third-party applications.
• Conduct application security testing using SAST, DAST, SCA, API security testing, and manual validation techniques.
• Review source code and provide secure coding guidance based on OWASP best practices.
• Partner with software engineering teams to identify security risks and recommend remediation strategies.
• Collaborate with DevOps teams to integrate application security testing into CI/CD pipelines.
• Provide security architecture guidance for new applications, APIs, cloud-native services, and integrations.
• Support implementation of modern authentication and authorization technologies (OAuth, OIDC, SAML, JWT).
• Evaluate and maintain application security tools to improve testing coverage.
• Develop automation for testing, reporting, and engineering workflows.
• Participate in security reviews for new technologies, cloud services, and third-party apps.
• Support incident investigation and remediation of application-layer security incidents.

Skills

Application Security

Security Engineering

Cloud security

DevSecOps

Communication

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

SCA

API security testing

Burp Suite

GitHub Advanced Security

Job description

Universal Music Group in Nashville is seeking an Application Security Engineer to join our global Tech Security & Identity organization. You will improve security of internal applications and cloud services by partnering with engineering, infrastructure, and product teams to embed security throughout the software development lifecycle.

The ideal candidate has hands-on experience with SAST/DAST, secure coding, cloud-native tech, and developer enablement, plus strong communication skills and a