{"id":3149186,"url":"https://alion.io/job/disco-security-engineer","title":"Security Engineer","company":{"id":676998,"name":"DISCO","domain":"disco.ac","url":"https://alion.io/company/disco-7","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["AU"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Django","optional":false},{"name":"IAM","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-23T11:34:32Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-24T11:44:54Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"DISCO is the industry standard for managing, organising and sharing music and other media. We make music and media workflow fast, intuitive and simple, directly connecting people and their work to save time. Today we count UMG, Sony, Warner Music, Netflix, Amazon among our customers, and hundreds of thousands of industry professionals interact with DISCO each month. Our customers are super passionate about our product.\nThe Opportunity\nAs DISCO grows, we’re investing further in security by creating a dedicated Security Engineer role. You’ll build on the strong foundations our engineering team has established as a SOC 2-compliant SaaS company in the music industry, and help shape how our security program evolves and scales.\nThis role will work with security end-to-end at DISCO: internal and application security, cloud infrastructure, detection and response, and compliance. You will collaborate directly with engineering, product, legal and leadership, setting standards, assisting to harden our systems and build out the monitoring and processes that keep our platform and our customers' data safe.\nIf you are passionate about real security and you want to be the person who writes the playbook rather than follows one, this role is for you.\nLocation\nThis is a remote position open to applicants who live and work in Australia.\nWhat You'll Do\nApplication Security\nLead security engineering for our Python/Django/React application, including code reviews, threat modelling, and security design reviews for new features and existing platform components\nOwn static analysis, dependency scanning, secret scanning in CI and triage of findings\nCoordinate penetration testing - including agentic scanning using frontier models; internal red team testing and third party testing - and drive remediation of findings\nPartner with engineers to set secure coding standards and provide practical guidance.\nIdentity and Access\nSSO/MFA enforcement for internal tooling, on and offboarding processes and access reviews\nSecure, auditable staff platform access\nCloud and Infrastructure Security\nCollaborate with our Platform team to secure our AWS environment: IAM, network architecture, secrets management, and compute/data layer hardening\nDefine and automate security baselines for infrastructure, including container security and CI/CD pipeline integrity\nLead secure architecture reviews for new systems and significant infrastructure changes\nDetection and Incident Response\nBuild and maintain detection capabilities across our application, cloud, and SaaS stack, including anomaly detection and alerts\nManage security incident response: triage, containment, investigation, stakeholder communication, and post-incident review\nDevelop runbooks and response playbooks so that when incidents happen, we are ready\nSecurity Compliance and Risk\nContribute to our SOC2 compliance program, including evidence collection, control monitoring, and audit readiness\nConduct vendor and customer security assessments\nCommunicate security risks clearly to engineering and leadership, and drive prioritisation of remediation work\nContribute to keeping security policies and documentation current and fit for purpose\nSecurity Leadership\nDefine the security roadmap, assessing priority based on impact and risk\nAct as a voice for security in architecture decisions\nMentor engineers and other staff on security and build a security first culture\nReport on security posture to leads and other departments\nAdvise and contribute to internal IT and physical security initiatives\nWhat You'll Bring\n7+ years in engineering and 5+ years of hands-on security experience in a product security, application security, or security engineering role\nExperience with threat hunting, threat intelligence, or red team activities\nStrong Python/Django application security knowledge - you know how web vulnerabilities present in this stack and how to fix them, not just find them\nSolid AWS cloud security experience covering IAM, network controls, and secure architecture patterns\nPractical incident response experience including experience being on call - you have led an incident before and know what a first class response looks like\nWorking knowledge of SOC2 or a comparable compliance framework, mapped to engineering practice (not just audit readiness)\nThe ability to communicate risk clearly to both technical and non-technical audiences\nComfort working autonomously in a remote, cross-timezone environment - you know when to escalate and when to just get on with it\nBonus Points\nExperience building a security program at a scaling startup\nFamiliarity with the music industry or B2B SaaS, including specific audio technologies like HLS\nRelevant certifications: OSCP, CISSP, AWS Security Specialty, or similar\nBenefits\nAt DISCO, our employees have told us what benefits mean the most to them, and we’ve listened. So as a DISCO employee, you will work remotely from home (or a co-working space) whilst being supported by a friendly and fun international team. In addition, you will receive:\nA competitive salary in a fast-growing startup\nFour weeks of paid vacation leave per year\nTwo weeks of paid sick leave per year\nPaid Parental Leave\nA company laptop\nMonthly internet allowance/reimbursement\nOffice set-up allowance\nAnnual learning and development allowance\nThe ability to work how you want. We’re not heavy on rule books. Everyone is trusted to figure out the best way to work.\nTo apply for this incredible position, please submit your resume and cover letter.\nAt DISCO, we strongly believe in the uniqueness of thought, experience and perspective that can only be achieved through having an inclusive and diverse workforce. We strive to continue making DISCO an incredible place to work by fostering a culture of inclusiveness, diversity, openness, and collaboration. We value all different kinds of experience, so even if you feel you don't meet all of the necessary criteria for this position, we encourage you to apply.\nPlease note that we do not accept unsolicited resumes from recruitment agencies.","description_format":"text","description_chars":6072,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Parental leave"],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-23T11:34:32Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":27,"reasons":["conf:3","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/disco-security-engineer","json_url":"https://alion.io/job/disco-security-engineer.json","meta":{"generated_at":"2026-10-24T11:47:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16873,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":676998},"rest":"https://alion.io/mcp/rest/get_company?id=676998"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdisco-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdisco-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdisco-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/disco-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdisco-security-engineer"}]}