Security Engineer – Product Security

The role

The Security Engineer – Product Security will embed security into the design, development, and operation of products and platforms. This role involves designing security controls, conducting threat modeling, and driving the secure development lifecycle across applications and services.

What you will do

• Support security design and architecture reviews for web, mobile, and cloud-based applications.
• Partner with leadership to define product security requirements and roadmaps.
• Conduct threat modeling workshops to identify risks and drive mitigations.
• Conduct security reviews for products deployed across AWS, Azure, and GCP.
• Own and mature the application and product security lifecycle.
• Drive adoption of automated security checks in CI/CD pipelines.
• Support application security testing and remediation with development teams.
• Establish secure coding standards, patterns, and reusable frameworks.
• Support API security assessments for REST/GraphQL APIs.
• Collaborate with security operations on monitoring and incident response workflows.

Required qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field; or equivalent practical experience
• 3+ years of experience in security engineering, application security, or product aligned security roles
• Familiarity with common web, mobile, and API vulnerabilities (e.g., OWASP Top 10)
• Experience securing applications and services in at least one major cloud provider
• Knowledge of application security tooling (SAST, DAST, SCA, secret scanning, WAF, or similar)
• Familiarity with secure deployment practices, including Infrastructure-as-Code review of Terraform, CI/CD pipeline security (GitHub Actions), and secrets management
• Familiarity with container security, including image hardening, Kubernetes RBAC, network policies, and runtime protection
• Familiarity with securing AI/ML platforms in cloud environments and agentic workflows
• Experience collaborating with software engineering teams in agile environments
• Knowledge of identity, authentication, and authorization concepts and technologies (e.g., OAuth, OIDC, SSO, modern identity platforms)
• Excellent communication and stakeholder management skills

Nice to have

• AWS preferred

Benefits

• Competitive programs to support your well-being

About the company

UTA is a premier global talent agency representing artists, creatives, and brands across film, television, music, and more. It is a diversified platform based in Los Angeles with offices in the U.S., London, and Munich.