Senior Security Engineer

About the role

Epidemic Sound is seeking a Senior Security Engineer to protect its products, platform and corporate systems. The role sits in the Business Tech Division, reports to the Head of Security and works closely with engineering, SRE, IT, Legal and People teams across the organisation.

Key responsibilities

• Own the vulnerability management programme across products, cloud and corporate estate – discovery, prioritisation, remediation tracking and reporting.
• Consolidate detection findings into a single risk picture and operate the Elastic SIEM detection stack.
• Partner with software engineers to advance the Secure Software Development Lifecycle, including code reviews, threat modelling and pre‑ship security input.
• Harden the GCP estate, Kubernetes platform and CI/CD pipelines.
• Run vendor security reviews and respond to enterprise customer security questionnaires.
• Respond to security incidents, participate in on‑call rotation and conduct training exercises.
• Build and maintain production‑grade security agents and automations used by engineers and the wider business.
• Evaluate AI models and frameworks against security standards.

Required profile

• ~5 years of experience in security engineering with depth in at least one area (application, infrastructure, enterprise or vulnerability management) and broad knowledge across the others.
• Hands‑on experience running a vulnerability management programme, including prioritisation, SLA setting and remediation tracking.
• Working knowledge of SCA/SAST tooling (e.g., Snyk, Port) and SIEM platforms (Elastic).
• Familiarity with security features of major public clouds, preferably GCP.
• Comfortable with container technologies such as Kubernetes and Docker.
• Proficient in at least one scripting or programming language (Python, Go or Bash).
• Solid experience with Git, GitHub Actions and Terraform.

Required skills

• Vulnerability Management
• SCA / SAST (Snyk, Port)
• Elastic SIEM
• Google Cloud Platform (GCP)
• Kubernetes & Docker
• CI/CD pipelines
• Terraform
• Git & GitHub Actions
• Python, Go, Bash
• AI model security evaluation