security specialist in music software

Muse Group creates popular apps for playing, recording, and composing music, along with music learning tools, music catalogs, and free open-source software. Hal Leonard, which joined Muse Group in 2023, publishes sheet music and music education materials and distributes musical instruments, gear, and software worldwide.

• Embed security by default into IT services
• Work closely with the IT Operations and Application Management teams
• Improve efficiency and user experience through AI automation

• More than 6 years of hands-on experience in information security or IT infrastructure, with a strong technical background
• Understand web and mobile application vulnerabilities and secure coding practices, including OWASP Top 10
• Identify, explain, and mitigate risks based on the OWASP framework
• Be familiar with OWASP ASVS for security requirements and testing
• Have practical knowledge of ISO 27001 and CIS Critical Security Controls (CIS18) or similar frameworks
• Have experience running or supporting internal or external security audits
• Have working knowledge of SIEM concepts and tools, secure SDLC / DevSecOps practices, vulnerability management, EDR, and identity and access management
• Understand Zero Trust architecture principles and how to sequence their adoption
• Have strong written English and be able to produce clear, business-facing documentation and recommendations
• Будет плюсом: experience in a multi-product SaaS or consumer software company, exposure to GDPR or data-privacy work, familiarity with CrowdStrike Falcon, Invicti, or comparable EDR / vulnerability-scanning tools, relevant certifications such as CompTIA Security+, CSSLP, CISM, ISO 27001 Lead Auditor/Implementer, or CISA

• Hybrid schedule: 3 days on-site and 2 days remote