Security Engineer; Product Security

• UTA seeks a Security Engineer – Product Security to help embed security into the design, development, and operation of our products and platforms
• In this role, you will work closely with engineering, product, and security teams to design and implement security controls across our applications and services, safeguarding our brand, our people, and our digital assets
• Support security design and architecture reviews for new and existing products, including web, mobile, and cloud-based custom applications, and provide clear, actionable recommendations
• Partner with product and engineering leadership to define product security requirements, risk tolerances, and security roadmaps across multiple teams and initiatives
• Conduct and facilitate threat modeling workshops to proactively identify emerging risks and attack vectors and drive mitigations into product design
• Conduct security reviews for products and services deployed across AWS, Azure, and GCP including cloud-native architectures, and platform-specific security controls
• Own and mature the application and product security lifecycle, including threat modeling, secure design, secure coding practices, testing, and release validation
• Assess and secure early-stage product design, architecture and workflows, associated with rapid prototyping and deployment
• Drive the adoption of automated security checks in CI/CD pipelines (SAST, DAST, SCA, secrets scanning, etc.) and ensure they are tuned to balance risk reduction with developer velocity
• Support and coordinate application security testing efforts, including tool-based and manual reviews, and work closely with development teams to prioritize and remediate findings
• Establish and evangelize secure coding standards, patterns, and reusable frameworks that can be leveraged across engineering teams
• Support API security assessments, including authentication/authorization validation for REST/GraphQL APIs and API gateway configuration reviews
• Collaborate with security operations to ensure product-related logs, alerts, and events are captured, correlated, and integrated into monitoring and incident response workflows
• Support vulnerability triage and management for product and application findings, including those surfaced through penetration tests and attack surface monitoring, covering risk assessment, remediation planning, and validation of fixes
• Ensure products handle sensitive data appropriately, including data classification, storage, transit, and retention practices aligned with organizational security requirements
• Evaluate, select, and help implement product security focused tools and services, influencing build vs buy decisions
• Develop documentation, playbooks, and training to raise the overall level of security awareness and capability across product and engineering teams
• Provide best practices on the secure use of AI-assisted development tools, including risks around dependency integrity, code suggestions, and agent-driven changes
• The unique and exciting opportunity to work at one of a leading global entertainment companies
• Access to the tools, leadership, and resources you will need to create and drive a center of excellence

If you are passionate about building secure products from the ground up and enjoy operating at the intersection of software development and cybersecurity, this role offers the opportunity to meaningfully shape UTA’s product security posture

Some experience collaborating with software engineering teams in agile environments, including participating in design reviews, code reviews, and sprint planning

Knowledge of identity, authentication, and authorization concepts and technologies (e.g., OAuth, OIDC, SSO, modern identity platforms)3+ years of experience in security engineering, application…