Security Engineer

Broadcast Music, Inc. (BMI); Nashville (TN); Remote; USD 70,000 - 100,000; Full time

Job summary

Broadcast Music, Inc. is seeking a Security Analyst to ensure compliance with security standards and handle incident responses. The role involves working with technology operations teams to maintain secure systems and analyze security incidents and vulnerabilities. The organization offers a hybrid work model along with competitive benefits to its employees.

Benefits

Health, dental, and vision insurance

401K with employer match

Flexible spending accounts

Paid vacation and sick/personal time

12 paid calendar holidays

Paid volunteer time off

Tuition assistance for qualified team members

Company paid life insurance

12 weeks paid parental leave

Qualifications

• Minimum 2 years of experience in a security analyst role or similar position.
• Proficiency with security tools and technologies.

Responsibilities

• Responds to information and cyber security incidents.
• Conducts root cause analysis to identify gaps and recommendations.
• Supports the management and tuning of security tools.

Skills

IT risks

cyber security

analytical skills

problem-solving skills

attention to detail

communication skills

scripting languages

Education

Bachelor’s degree in Computer Science

Tools

IDS/IPS

SIEM

firewalls

endpoint protection

Job description

POSITION SUMMARY
Supports solution design, implementation, configuration, security infrastructure, and application components. Focuses on core security technologies to ensure they are in compliance with security industry commonly accepted practices, internal policies, and standards. Collaborates with technology operations teams, including business groups, to ensure the technologies deployed are maintained in a secure manner.

LOCATION
Remote - US

FUNCTIONS OF THE JOB

Essential Functions: which may be representative but not all inclusive of those commonly associated with this position.

• Responds to information and cyber security incidents by analyzing logs, threat intel, and other sources of information.
• Functions as a liaison between the Technical Security team and business units to track and monitor incident response and provide status updates as needed.
• Analyzes alerts generated by various security tools to reduce false positives and increase alert effectiveness.
• Reviews audit trails for unauthorized access attempts or other information security violations.
• Conducts root cause analysis to identify gaps and recommendations to eliminate risks.
• Supports the management and tuning of security tools.
• Assists in identifying gaps in the current state of security operations and recommending ways to improve its effectiveness.
• Determines ways to automate the incident response process and implement improvements, with security engineering assistance.
• Resolves security tickets not related to incident response.
• Documents and tracks security incidents and breaches using the corporate risk tracking platform.
• Develops dashboards and metrics to monitor current state of the security operations process and technology.
• Assists with security engineering work in other security domains, vulnerability management, penetration testing, digital certificate management, and privileged access.
• Creates scanning jobs and/or assessment tasks within a variety of security tools.
• Oversees the end-to-end vulnerability life cycle from discovery to closure.
• Reviews the list of vulnerabilities and work with the application and operations teams to remediate the findings.
• Researches and provides guidance for addressing vulnerabilities, which could include system patching, deployment of specialized controls, standards, or infrastructure changes, and/or changes in development processes. Identifies and resolves any false positive findings in assessment results.
• Maintains knowledge of the threat landscape and intelligence feeds to identify and triage new threats and vulnerabilities targeting BMI.
• Serves as a point of contact on issues, dependencies, and risks related to vulnerability scanning.
• Supports compliance and risk management activities, recommends security controls, corrective and preventative actions to mitigate vulnerability risks.
• Assists with the development of dashboards and data visualizations for executive management, operations teams, and other stakeholders.
• Develops, documents and reports business-level metrics for vulnerabilities and remediation progress.
• Functions as the process manager for the vulnerability management program with the ability to identify and improve efficiency in operations.
• Manages tracking and remediation of vulnerabilities and timelines with responsible technology developers and support teams.

POSITION QUALIFICATION REQUIREMENTS
Education:Bachelor’s degree in Computer Science, Information Security, or a related field.
Experience:Minimum of 2 years of experience in a security analyst role or similar position.

SKILLS AND ABILITIES
Which may be representative but not all inclusive of those commonly associated with this position.

• Strong working knowledge of IT risks, cyber security, and computer operating software.
• Proficiency in security tools and technologies, including firewalls, IDS/IPS, SIEM, and endpoint protection solutions.
• Strong analytical and problem-solving skills with the ability to analyze complex security issues.
• Knowledge of scripting languages (e.g., Python, PowerShell) for automation of security tasks.
• High level of attention to detail and accuracy in work.
• Excellent verbal and written communication skills.
• Ability to explain technical concepts to non-technical stakeholders.
• Highest level of confidentiality.

SALARY RANGE
The specific base salary offered to a successful applicant will be based on individual qualifications, skills, experience, and education. The pay range is subject to change at any time based on various internal and external factors. The position may also be eligible for one or more performance-based bonuses. In addition to cash compensation, BMI offers a competitive portfolio of benefits to its employees, as described below.

What We Give to You:

• Health, dental, and vision insurance
• 401K with employer match
• Flexible spending accounts
• Paid vacation and paid sick/personal time
• 12 paid calendar holidays
• Paid volunteer time off
• Summer hours that offer more time for fun in the sun
• Company paid life insurance
• Up to 12 weeks paid parental leave
• Tuition assistance for qualified team members
• Commuter benefits (New York)
• Amazing and engaging culture
• Employee Resource Groups

BROADCAST MUSIC, INC. IS AN EQUAL OPPORTUNITY EMPLOYER: All applicants will receive equal opportunity for employment without regard of race, color, sex, religion, nationality, age, sexual orientation, gender identity and/or expression, veteran’s or marital status, disability, or any other cultural factor.

#LI-Hybrid