Cloud & Application Security Engineer

MSG Entertainment Holdings, LLC; Burbank (CA); On-site; USD 130,000 - 155,000; Full time

Job summary

MSG Entertainment Corp. in Burbank (with Las Vegas) seeks a Cloud & Application Security Engineer to design, implement, and operate security controls across cloud infrastructure, applications, and software delivery pipelines.

You will collaborate with DevOps and engineering teams to build secure-by-default platforms, conduct threat modeling, perform secure code reviews, and harden CI/CD pipelines using IaC tools such as Terraform.

Qualifications

• 4–6 years of related experience in cloud/security engineering.
• Bachelor’s degree or equivalent experience.
• Experience securing enterprise cloud environments across AWS, Azure, and/or GCP, including Kubernetes.
• Proficiency with CI/CD pipelines, Terraform, and modern DevOps platforms.

Responsibilities

• Design, implement, and mature secure cloud architectures across AWS, Azure, and GCP with focus on GCP.
• Develop, audit, and harden cloud infrastructure including IAM, networking, policies, logging, and Terraform-based IaC.
• Provide security architecture reviews for cloud apps, APIs, infra, DevOps, and AI-assisted development.
• Perform application security assessments, secure code reviews, and hands-on testing of web apps, APIs, and cloud services.
• Identify, prioritize, and remediate vulnerabilities including zero-day threats.
• Lead evaluations and PoCs for security tech across cloud and apps.
• Secure AI platforms and AI-assisted development with proper security controls.

Skills

Cloud security

Application security

CI/CD security

Python scripting

Terraform

Kubernetes

Cloud platforms

Threat modeling

Education

Bachelor’s degree

Tools

Terraform

Kubernetes

Python

Go

Job description

Cloud & Application Security Engineer

Location: Burbank, CA; Las Vegas, NV

Position Type: Full-time

Madison Square Garden Entertainment Corp. (MSG Entertainment) is a leader in live entertainment, delivering unforgettable experiences while forging deep connections with diverse and passionate audiences. The Company’s portfolio includes a collection of world-renowned venues – New York’s Madison Square Garden, Infosys Theater at Madison Square Garden, Radio City Music Hall, and Beacon Theatre; and The Chicago Theatre – that showcase a broad array of sporting events, concerts, family shows, and special events for millions of guests annually. In addition, the Company features the original production, the Christmas Spectacular Starring the Radio City Rockettes, which has been a holiday tradition for more than 90 years. More information is available at www.msgentertainment.com .

Who are we hiring?

The Cloud & Application Security Engineer will design, implement,validate, andoperatesecurity controls across our cloud infrastructure, applications, and software delivery pipelines. This role will partner with DevOps, various Engineering, and Security teams to build secure-by-default platforms that enable developers while reducing organizational risk.

This is a hands‑on role requiring strong experience in cloud security architecture, application security testing, CI/CD pipeline hardening, and infrastructure-as-code security.

What will you do?

• Design, implement, and mature secure cloud architectures across AWS, Azure, and GCP, with a primary focus on GCP.
• Develop, audit, and harden cloud infrastructure, including IAM, networking, organization policies, logging, and Terraform-based Infrastructure-as-Code.
• Provide security architecture reviews and guidance for cloud applications, APIs, infrastructure, DevOps, and AI‑assisted development.
• Perform application security assessments, secure code reviews, and hands‑on testing of web applications, APIs, and cloud services using automated and manual techniques to identify vulnerabilities and drive remediation.
• Identify , prioritize, and remediate cloud and application vulnerabilities, including critical and zero‑day threats.
• Lead evaluations, proof‑of‑concepts, and implementation of cloud and application security technologies.
• Secure AI platforms and AI‑assisted development by implementing appropriate security controls and reviewing AI‑assisted applications for security risks.
• Partner with Security Operations to improve cloud detection, monitoring, incident response, and security visibility.
• Provide exceptional experiences for our guests, partners, and team members, including by adhering to our appearance and presentation guidelines while on‑site.

What do you need to succeed?

• 4-6 years of related experience .
• Bachelor’s degree, or equivalent combination of education and experience .
• Experience securing enterprise cloud environments across AWS, Azure, and/or GCP, including Kubernetes.
• Strong understanding of cloud architecture, IAM, networking, cloud security controls, and Infrastructure-as-Code.
• Experience integrating security into CI/CD pipelines using Terraform and modern DevOps platforms.
• Proficiency in Python, PowerShell, Bash, Go, or a similar language, or demonstrated ability to leverage AI‑assisted engineering tools to develop automation and security solutions.
• Hands‑on experience with Wiz or a comparable CSPM/CNAPP platform.
• Experience with application security, including secure SDLC, threat modeling, secure code reviews, SAST, DAST, SCA, secret scanning, vulnerability management, remediation, and web application security testing.
• Strong understanding of web application security, REST APIs, authentication (OAuth/OIDC/JWT), and OWASP Top 10.
• Familiarity with AI security concepts and securing enterprise AI platforms or AI‑assisted applications.
• Security certifications (e.g., CISSP, CCSP, AWS Security Specialty, Google Professional Cloud Security Engineer, AZ‑500, CSSLP, or GWAPT) are a plus.

Pay Range (Burbank): $130,000-$155,000

Pay Range

$120,000 — $140,000 USD

At MSG, we recognize the importance of upskilling employees’ talents and strengths so they can drive their careers forward. We are proud to offer a robust set of tools and resources to help employees understand their interests and purpose, harness their talents and obtain the skills they need to reach the next step in their careers. Growth and longevity for our employees are top priorities here.

We value diversity and are looking for extraordinary employees of all backgrounds! MSG is an Equal Opportunity Employer and provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, sexual and reproductive health choices, national origin, citizenship, age, genetic information, disability, or veteran status. MSG complies with all applicable federal, state, and local laws governing nondiscrimination, including consideringrequests for reasonable accommodations as required.

EEO

We value diversity and welcome employees of all backgrounds. Our Company is an Equal Opportunity Employer and provides equal employment opportunities without regard to race, color, religion, gender, sexual orientation, gender identity or expression, sexual and reproductive health choices, national origin, citizenship, age, genetic information, disability, veteran status, or any other characteristic protected by law. We also strictly prohibit discrimination and harassment on these bases.

At this time, Federal law requires that we maintain a record a record of each employee's sex and race or ethnicity, and that we invite employees to voluntarily self-identify. The company is limited to the categories listed below, and the definitions for each category have been established by the federal government.

Submission of this information voluntary and refusal to provide it will note subject you to any adverse treatment. The information will be kept confidential and only be used in accordance with the provisions of applicable federal laws, including those which require the information to be summarized and reported to the Federal Government for civil rights enforcement purposes.

If you choose not to self-identify your race/ethnicity or gender at this time, the Federal Government requires that we determine the information by visual survey and/or other available information.