Security Engineer at Kobalt Music Group

Kobalt, a leading music company, is seeking a Security Engineer to enhance its security program. The Security Engineer will focus on securing cloud infrastructure and applications while contributing to broader security initiatives.

The role involves collaborating with engineering teams to protect the technology stack and build a resilient security posture.

Key Responsibilities:

• Cloud Security: Design, implement, and maintain security controls for AWS cloud infrastructure.
• Secure Software Development: Champion secure coding practices and conduct security code reviews.
• Vulnerability Management: Review vulnerability reports and work with teams to remediate them.
• Threat Modeling & Risk Assessment: Lead threat modeling exercises for new cloud services and software features.
• Alerting & Incident Response: Design and implement alerting mechanisms and investigate security incidents.
• Security Tooling: Research, evaluate, and implement new security tools and processes.
• Partner Collaboration: Work with external security partners to optimise alerting and incident investigations.
• Penetration Testing: Coordinate penetration tests and address identified vulnerabilities.

Ideal Candidate should have:

• Versatile Skill Set: Comfortable engaging with broader security domains.
• Strong Collaboration: Proven ability to work effectively with cross-functional teams.
• Proactive Problem Solver: Eager to identify and address security risks.
• Strong Cloud Security Expertise: Good understanding of AWS security best practices and security frameworks.
• Product Security Mindset: A strong understanding of secure software development principles.
• Excellent Communication: Ability to clearly communicate technical concepts.
• Self-Starter: Ability to work independently and manage projects with minimal supervision.

Nice to have:

• CSPM/CNAPP: Experience with tools such as Orca or Wiz.
• Security Certifications: Relevant certifications like OSCP, OSWE, BSCP, CISSP, and AWS certificates.
• Scripting/Automation: Experience with Python, Bash, or similar scripting languages.