Senior Security Engineer

Stack

Responsibilities

• ▹Own the vulnerability management programme across products, cloud, and corporate estate
• ▹Consolidate findings across the detection stack into a single risk picture
• ▹Partner with software engineers to grow the Secure SDLC — code reviews, threat models, pre-ship input
• ▹Harden the GCP estate, Kubernetes platform, and CI/CD systems
• ▹Run vendor security reviews and respond to enterprise customer security questionnaires
• ▹Operate and tune the Elastic SIEM and broader detection stack, building new detections
• ▹Respond to security incidents, including on-call, and run training exercises
• ▹Build and run security agents and automations as production-grade software
• ▹Evaluate AI models and frameworks against security standards

Requirements

• ▹Around five years in security engineering, with depth in at least one area (appsec, infrastructure, enterprise security, vulnerability management)
• ▹Hands-on experience running or contributing to a vulnerability management programme
• ▹Working knowledge of SCA/SAST tooling, Internal Developer Portals, and SIEM (Snyk, Port, Elastic)
• ▹Working knowledge of major public cloud security features, GCP preferred
• ▹Comfort with Kubernetes, Docker, or other container architectures
• ▹Confident with at least one language/scripting tool (Python, Go, or Bash)
• ▹Solid experience with Git, GitHub Actions, and Terraform
• ▹Active, daily use of AI and agentic tools with concrete examples
• ▹Experience with vendor security questionnaires
• ▹Familiarity with security frameworks such as PCI DSS and NIST

Nice to have

• ▹Penetration testing background or OWASP Top 10 fluency
• ▹Experience with CI/CD security hardening at scale
• ▹Track record building security tools other engineers want to use
• ▹Experience reporting vulnerability management and security posture metrics to leadership
• ▹Familiarity with social engineering attacks, especially phishing, and mitigating controls

Soft skills

About the company

Epidemic Sound is a Stockholm-headquartered music and sound technology company with 400+ people across offices in London, New York, Los Angeles, Berlin, Paris, Oslo, and Seoul. An industry leader with a startup mentality, shaping the sound of streaming, content, and culture.