Senior Product Security Engineer
UTA Ventures is the venture division of United Talent Agency.
About UTA Ventures
UTA Ventures seeks out, builds, and accelerates innovative businesses that change how people live, work, and play. It operates at the intersection of entertainment, commerce, and technology, partnering with talent to build companies, extend brand platforms, and expand into new categories. The division also invests in growing startups, including businesses in the creator economy, frontier technology, and the future of entertainment.
Skills
About the Role
Lead product security strategy, architecture, secure development lifecycle practices, application and API security assessments, vulnerability management, monitoring support, tooling, documentation, training, and guidance for secure AI-assisted development.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field, or equivalent practical experience
- 5+ years of experience in security engineering, application security, or product-aligned security roles
- Understanding of web, mobile, and API vulnerabilities, including OWASP Top 10
- Experience securing applications and services in a major cloud provider, with AWS preferred
- Experience with application security tooling and CI/CD integration
- Familiarity with Terraform review, GitHub Actions security, and secrets management
- Familiarity with container security, including image hardening, Kubernetes RBAC, network policies, and runtime protection
- Familiarity with securing AI/ML platforms and agentic workflows
- Experience collaborating with software engineering teams in agile environments
- Knowledge of identity, authentication, and authorization technologies including OAuth, OIDC, and SSO
- Communication and stakeholder management skills
Responsibilities
- Lead security design and architecture reviews for web, mobile, and cloud-based applications
- Define product security requirements, risk tolerances, and security roadmaps with product and engineering leadership
- Conduct threat modeling workshops and drive mitigations into product design
- Review security for products and services deployed across AWS, Azure, and GCP
- Own and mature the application and product security lifecycle
- Drive automated security checks in CI/CD pipelines
- Lead application security testing and prioritize remediation findings with development teams
- Establish secure coding standards, patterns, and reusable frameworks
- Lead API security assessments and review API gateway configurations
- Integrate product logs, alerts, and events into monitoring and incident response workflows
- Own vulnerability triage and management for product and application findings
- Ensure sensitive data is handled according to security requirements
- Evaluate and implement product security tools and services
- Develop security documentation, playbooks, and training
- Provide best practices for secure use of AI-assisted development tools
Benefits
- The opportunity to work at a leading global entertainment company
- Access to tools, leadership, and resources to create and drive a center of excellence
- The opportunity to do the best work of your career
- Inclusive and diverse company culture
- Competitive programs to support well-being
- Collaborative environment with room to grow