Security Engineer (Product Security)

Join UTA, a leading global entertainment company, as a Security Engineer - Product Security. In this role, you will embed security into the design, development, and operation of our products and platforms. You will work closely with engineering, product, and security teams to design and implement security controls, conduct security reviews, and drive the adoption of automated security checks. This is an exciting opportunity to shape UTA's product security posture and make a meaningful impact in the industry.

Responsibilities

• Collaborate with engineering, product, and security teams to design and implement security controls across applications and services.
• Conduct and facilitate threat modeling workshops to proactively identify emerging risks and attack vectors and drive mitigations into product design.
• Drive the adoption of automated security checks in CI/CD pipelines and ensure they are tuned to balance risk reduction with developer velocity.
• If you are passionate about building secure products from the ground up and enjoy operating at the intersection of software development and cybersecurity, this role offers the opportunity to meaningfully shape UTA’s product security posture

Requirements

• Some experience collaborating with software engineering teams in agile environments, including participating in design reviews, code reviews, and sprint planning
• Knowledge of identity, authentication, and authorization concepts and technologies (e.g., OAuth, OIDC, SSO, modern identity platforms)
• 3+ years of experience in security engineering, application security, or product aligned security roles, with a track record of owning and driving security initiatives
• Knowledge of application security tooling (SAST, DAST, SCA, secret scanning, WAF, or similar) and integrating these into CI/CD workflows
• Familiarity with common web, mobile, and API vulnerabilities (e.g., OWASP Top 10) and practical experience preventing and remediate them at scale
• Experience securing applications and services in at least one major cloud provider (AWS preferred), including cloud native architectures
• Excellent communication and stakeholder management skills, with the ability to influence senior technical and nontechnical partners and drive consensus
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field; or equivalent practical experience
• Familiarity with container security, including image hardening, Kubernetes RBAC, network policies, and runtime protection
• Familiarity with secure deployment practices, including Infrastructure-as-Code review of Terraform, CI/CD pipeline security (GitHub Actions), and secrets management
• Familiarity with securing AI/ML platforms in cloud environments and agentic workflows, including access control, data protection, and governance across the application development and deployment lifecycle