Lead the protection and defense of UMG’s digital applications and product ecosystem with an emphasis on securing artificial technology (AI)
Focus on detecting, mitigating, and responding to AI-related security threats
Establish, lead, and execute multi-year roadmaps to mature AI security
Conduct application and product security evaluations and lead AI security assessments in a cross-functional environment
Procure and/or build technical solutions to embed automated security checks into the AI SDLC and ML-Ops
Threat model complex Agentic and AI systems and design security requirements collaboratively
Review code for security bugs in the context of AI-driven systems
Provide leadership for AI Security policies and standards in collaboration with technology risk
Provide AI/Agent subject matter expertise for AI Incidents and Security Reviews
Assist in the formation of an AI Center of Excellence (ACE)

Requirements

10+ years experience in product security, application security, and/or DevSecOps
Strong knowledge of security of safety risks of LLMs and AI Agents
5+ Years of experience automating security checks, including SAST, SCA, and DAST, directly into CI/CD pipelines
Extensive experience with STRIDE or other threat modeling frameworks
Knowledge and experience with technologies including K8s, Containers, CI/CD, and CSPs
Familiarity with function and purpose of key AI platform components such as AI gateways (Kong, Databricks Mosaic AI Gateway, custom API orchestration), Model Orchestration (Examples LangChain, LlamaIndex, etc.)

Benefits

Comprehensive medical, dental, and vision coverage
100% coverage for out-patient in-network mental health services
Fertility coverage for eligible medical plan participants
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)
Student Loan Repayment Assistance and Tuition Reimbursement
401(k) with 100% immediate vesting on the first 5% of your contributions, plus an additional UMG contribution
Flexible Paid Time Off (PTO) for exempt employees
3-weeks PTO for non-exempt employees
2-weeks paid Winter Break
10 Company Holidays (including Juneteenth and Wellbeing Day)
Summer Fridays (between Memorial Day and Labor Day)
Generous paid parental leave for every type of parent

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

product securityapplication securityDevSecOpsautomating security checksSASTSCADASTthreat modelingAI security assessmentssecurity evaluations

Soft Skills

leadershipcollaborationcommunication