Senior Product Security Engineer , UTA
$160-200k
Office located in Foothill, CA
Talent & entertainment agency
Be an early applicant
Talent & entertainment agency
1001+ employees
Be an early applicant
$160-200k
Office located in Foothill, CA
1001+ employees
Company mission
To shape talent, build careers, and tell stories.
Role
Who you are
- Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or a related field; or equivalent practical experience
- 5+ years of experience in security engineering, application security, or product aligned security roles, with a track record of owning and driving security initiatives
- Deep understanding of common web, mobile, and API vulnerabilities (e.g., OWASP Top 10) and practical experience preventing and remediating them at scale
- Strong experience securing applications and services in at least one major cloud provider (AWS preferred), including cloud native architectures
- Hands on experience with application security tooling (SAST, DAST, SCA, secret scanning, WAF, or similar) and integrating these into CI/CD workflows
- Familiarity with secure deployment practices, including Infrastructure-as-Code review of Terraform, CI/CD pipeline security (GitHub Actions), and secrets management
- Familiarity with container security, including image hardening, Kubernetes RBAC, network policies, and runtime protection
- Familiarity with securing AI/ML platforms in cloud environments and agentic workflows, including access control, data protection, and governance across the application development and deployment lifecycle
- Solid experience collaborating with software engineering teams in agile environments, including participating in design reviews, code reviews, and sprint planning
- Strong knowledge of identity, authentication, and authorization concepts and technologies (e.g., OAuth, OIDC, SSO, modern identity platforms)
- Excellent communication and stakeholder management skills, with the ability to influence senior technical and nontechnical partners and drive consensus
- If you are passionate about building secure products from the ground up and enjoy operating at the intersection of software development and cybersecurity, this role offers the opportunity to meaningfully shape UTA’s product security posture
What the job involves
- UTA seeks a Senior Product Security Engineer to help embed security into the design, development, and operation of our products and platforms
- In this role, you will work closely with engineering, product, and security teams to design and implement security controls across our applications and services, safeguarding our brand, our people, and our digital assets
- Product security strategy & architecture:
- Lead security design and architecture reviews for new and existing products, including web, mobile, and cloud-based custom applications, and provide clear, actionable recommendations
- Partner with product and engineering leadership to define product security requirements, risk tolerances, and security roadmaps across multiple teams and initiatives
- Conduct and facilitate threat modeling workshops to proactively identify emerging risks and attack vectors and drive mitigations into product design
- Conduct security reviews for products and services deployed across AWS, Azure, and GCP including cloud-native architectures, and platform-specific security controls
- Secure development lifecycle & testing:
- Own and mature the application and product security lifecycle, including threat modeling, secure design, secure coding practices, testing, and release validation
- Assess and secure early-stage product design, architecture and workflows, associated with rapid prototyping and deployment
- Drive the adoption of automated security checks in CI/CD pipelines (SAST, DAST, SCA, secrets scanning, etc.) and ensure they are tuned to balance risk reduction with developer velocity
- Lead and coordinate application security testing efforts, including tool-based and manual reviews, and work closely with development teams to prioritize and remediate findings
- Establish and evangelize secure coding standards, patterns, and reusable frameworks that can be leveraged across engineering teams
- Lead API security assessments, including authentication/authorization validation for REST/GraphQL APIs and API gateway configuration reviews
- Operations, monitoring & incident response:
- Collaborate with security operations to ensure product-related logs, alerts, and events are captured, correlated, and integrated into monitoring and incident response workflows
- Own vulnerability triage and management for product and application findings, including those surfaced through penetration tests and attack surface monitoring, covering risk assessment, remediation planning, and validation of fixes
- Ensure products handle sensitive data appropriately, including data classification, storage, transit, and retention practices aligned with organizational security requirements
- Tooling, enablement & leadership:
- Evaluate, select, and help implement product security focused tools and services, influencing build vs buy decisions
- Develop documentation, playbooks, and training to raise the overall level of security awareness and capability across product and engineering teams
- Provide best practices on the secure use of AI-assisted development tools, including risks around dependency integrity, code suggestions, and agent-driven changes
- What You Will Get:
- The unique and exciting opportunity to work at one of a leading global entertainment companies
- Access to the tools, leadership, and resources you will need to create and drive a center of excellence
- The opportunity to do the best work of your career
- Work in an inclusive and diverse company culture
- Competitive programs to support your well-being
- Experience working in a collaborative environment with room to grow
Our take
Founded in 1991, UTA represents some of the world’s most acclaimed and recognised figures - from actors and athletes to writers and digital influencers. These include Lizzo, The Coen Brothers, Bad Bunny and Timothee Chalamet.
The entertainment landscape is in a permanent state of flux, but the boom of digital and social media has brought rise to new kinds of talent. To remain on the cultural pulse, UTA has expanded its business into gaming, digital media and influencers, as younger consumers spend more time playing games or watching social content over traditional media.
With the acquisitions of Fletcher & Company and Curtis Brown, UTA took on the estates of esteemed literary figures like John le Carré and Ian Fleming. This reflects a larger competition between agencies to acquire intellectual property to develop into content. In doing so, UTA hopes to find competitive edge over other dominant agencies, WME and CAA.
Freddie
Company Specialist at Welcome to the Jungle
Insights
10% employee growth in 12 months
Company
Company HQ
Beverly Hills, CA
Leadership
Jeremy Zimmer
(Co-Founder & CEO)Has served as CEO for UTA since 1991.
Jim Berkus
(Co-Founder & Chair)Served as a partner at Leading Artists Agency, which merged with Bauer-Benedek Agency to form UTA.
Peter Benedek
(Co-Founder & Owner)Also served as a partner at Bauer-Benedek Agency.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 11 more jobs at UTA