{"id":2352901,"url":"https://alion.io/job/universalmusic-application-security-engineer","title":"Application Security Engineer","company":{"id":15061,"name":"Universalmusic","domain":"universalmusic.com","url":"https://alion.io/company/universalmusic","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":6,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":55000,"max_usd":132000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex XDR","optional":false},{"name":"ITIL","optional":false},{"name":"Linux","optional":false},{"name":"Nessus","optional":false},{"name":"OpenVAS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"VMWare","optional":false}],"status":"live","first_seen_at":"2026-10-12T14:13:16Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-12T19:33:28Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Music is Universal\nIt’s the passionate and dedicated team at Universal Music who help make us the world’s leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.\nEveryone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.\nWe will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email .\nJob Summary:\nWe are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.\nWe are currently seeking a highly skilled vulnerability engineer to join our Vulnerability Management program. They will drive resolution of all identified IT vulnerabilities in a global enterprise to ensure the smooth and efficient ongoing operation of the UMG Global infrastructure. A high level of diverse technical skills for troubleshooting and problem analysis is required, along with the ability to clearly communicate the results of problem analysis to business stakeholders, IT support teams, and network providers to resolve operational issues quickly and effectively. This position requires established and proven experience in a global environment. In addition to having strong technical skills, you must be comfortable in effectively communicating with business end users, technical IT teams, business partners, network providers, and business process outsourced vendors, all while being sensitive to a wide diversity of cultural and technical backgrounds in a global business environment.\nJob Functions:\nDemonstrate ability to anticipate security issues, identify emerging risks, and take initiative in vulnerability remediation without constant supervision. A track record of proactively addressing vulnerabilities and improving security processes is essential.\n\nPrioritize and classify vulnerabilities based on risk impact, system criticality, and business context.\n\nDrive resolution of identified vulnerabilities within 60 days of identification.\n\nAdminister and maintain the Veritas eDiscovery platform, ensuring its availability, security and proper configuration.\n\nAdminister and maintain Cortex XDR for endpoint detection and response.\n\nEnsure compliance with data retention policies and assist legal and compliance teams with data retrieval and analysis requests.\n\nWork with internal customers, teammates and 3rd party providers to ensure operational security of the cloud and server infrastructure.\n\nMaintain high quality process and procedure documentation.\n\nMaintain & enhance knowledge of key technologies and risks.\n\nCommunicate risk and remediation requirements clearly to both technical and non-technical stakeholders, including leadership and external auditors.\n\nAutomate the vulnerability reporting and remediation processes to improve efficiency and reduce manual intervention.\n\nParticipate in incident response activities related to vulnerability exploitation and provide remediation guidance.\n\nParticipate in on-call rotation to respond to critical security alerts and events. Work out of standard business hours will occasionally be required.\n\nJob Requirements:\n3+ years of hands-on experience in vulnerability management, remediation, or related cybersecurity roles.\n\n1-2 years of experience administering and maintaining Veritas eDiscovery platforms, including troubleshooting, upgrades and ensuring compliance with data retention requirements.\n\nExperience with common vulnerability assessment tools (e.g., Nessus, Qualys, Tenable, OpenVAS).\n\nKnowledge of patch management processes and tools.\n\nMust possess strong people skills and the ability to be both diplomatic and firm.\n\nExperience in highly available 24x7x365 production environment.\n\nFluency in operating system administration and tools including: Microsoft, Mac OS X, Linux, Python, Powershell, etc.\n\nProven experience with Amazon AWS and Microsoft Azure (Google Compute a plus) in an enterprise setting.\n\nManage time well in a high-interrupt operational environment. Handle the details of several technical tasks simultaneously.\n\nFamiliarity with VMware Tanzu CloudHealth.\n\nAppropriate professional certifications.\n\nEducation:\nBachelor’s Degree in Computer Science or Engineering or closely related field or comparable education and experience.\n\nCertifications such as CISSP, CISA, Security+\n\nITIL Foundation Certification strongly desired.\n\nJust So You Know…\nThe company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.\n Job Category:\nUniversal Music Group","description_format":"text","description_chars":6054,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Music Industry"],"lifecycle":[{"event":"open","at":"2026-10-12T14:13:16Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-10T06:21:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:6","win:early"],"computed_at":"2026-10-13T02:11:57Z"},"pay":null,"html_url":"https://alion.io/job/universalmusic-application-security-engineer","json_url":"https://alion.io/job/universalmusic-application-security-engineer.json","meta":{"generated_at":"2026-10-13T02:11:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3190,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15061},"rest":"https://alion.io/mcp/rest/get_company?id=15061"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Funiversalmusic-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Funiversalmusic-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Funiversalmusic-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/universalmusic-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Funiversalmusic-application-security-engineer"}]}