Senior Security Engineer

About the Company

Epidemic Sound is an industry leader in soundtracking for streaming, content, and culture, blending the latest in tech with a startup mentality. With a global presence from Stockholm to Los Angeles, we transform how the world experiences sound.

Responsibilities

• Own the vulnerability management programme across products, cloud, and corporate estate
• Consolidate findings across the detection stack into a single risk picture
• Partner with software engineers to grow the Secure Software Development Lifecycle (SSDL)
• Harden the GCP estate, Kubernetes platform, and CI/CD systems
• Run vendor security reviews and respond to enterprise customer security questionnaires
• Operate and tune the Elastic SIEM and broader detection stack
• Respond to security incidents including on-call duties
• Build and run security agents and automations as production-grade software
• Evaluate AI models and frameworks against security standards

Requirements

• Around five years in security engineering with depth in AppSec, InfraSec, Enterprise Security, or Vulnerability Management
• Hands-on experience running a vulnerability management programme
• Working knowledge of SCA/SAST tooling, Internal Developer Portals, and SIEM (Snyk, Port, Elastic)
• Working knowledge of major public cloud providers, preferably GCP
• Comfort with Kubernetes, Docker, or container architectures
• Proficiency in Python, Go, or Bash
• Experience with Git, GitHub Actions, and Terraform
• Active, daily use of AI and agentic tools with examples of built agents
• Experience with vendor security questionnaires
• Familiarity with security frameworks like PCI DSS and NIST

Preferred Qualifications

• Penetration testing background or OWASP Top 10 fluency
• Experience with CI/CD security hardening at scale
• Track record of building security tools for other engineers
• Experience reporting security posture metrics to leadership
• Familiarity with social engineering and phishing controls