Senior Security Engineer

Who We Are

SiriusXM and its brands (Pandora, SiriusXM Media, AdsWizz, Simplecast, and SiriusXM Connect) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners -- in the car, at home, and anywhere on the go with connected devices. Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are.

This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world. Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting. No matter their individual role, each of our employees plays a vital part in bringing SiriusXM’s vision to life every day.

SiriusXM is the leading audio entertainment company in North America, and the premier programmer and platform for subscription and digital advertising-supported audio products. SiriusXM’s platforms collectively reach approximately 150 million listeners, the largest digital audio audience across paid and free tiers in North America, and deliver music, sports, talk, news, comedy, entertainment and podcasts. Pandora, a subsidiary of SiriusXM, is the largest ad-supported audio entertainment streaming service in the U.S. SiriusXM's subsidiaries Simplecast and AdsWizz make it a leader in podcast hosting, production, distribution, analytics and monetization. The Company’s advertising sales organization, which operates as SiriusXM Media, leverages its scale, cross-platform sales organization and ad tech capabilities to deliver results for audio creators and advertisers. SiriusXM, through SiriusXM Canada Holdings, Inc., also offers satellite radio and audio entertainment in Canada. In addition to its audio entertainment businesses, SiriusXM offers connected vehicle services to automakers.

How You’ll Make An Impact:

This Enterprise Security Engineer position will be responsible for designing and implementing security automation solutions with a focus on Enterprise IT systems, SOAR response capabilities, and dashboard visibility projects. The best candidate will be able to work with stakeholders to derive requirements, design scalable solutions, and manage the projects to completion. The position will also be responsible for managing the security design and configurations of our Security Toolsets (EDR, WAF, Scanner, etc.) with other members of the Enterprise Security team.

What You’ll Need:

• Design and build automation solutions for use-cases from all teams within the Information Security department.
• Implement and document new security tools and platforms used by either Enterprise IT or SOC Team.
• Support the implementation and improvement of our SIEM platform and SOAR automations.
• Work with Operations Teams to design solutions to security gaps identified by the SOC and Incident Response teams.
• Build and extend scanning and monitoring to ensure we quickly detect misconfigurations and anomalous behavior in our environments.

What You’ll Need:

5-7+ years IT Engineering experience, including 2-5 years of Information Security experience. Good working knowledge of NIST SP 800-53. Ability to write technical documentation and procedure guides. Proficient at documenting your work in tickets and presenting at Change Review Board meetings. Experience with scripting language(s) (Python, Bash, PowerShell, etc.). Experience with automation platforms (Rundeck, AWX, etc.). Experience with SOAR solutions (Siemplify, Splunk SOAR, XSOAR). Experience with Dashboard and Visualization tools (Splunk, Grafana, etc.). Experience with Enterprise Security tools and Platforms:SentinelOne EDRAkamai and Imperva WAFZscaler SWGProofpoint Email Security GatewayPalo Alto Firewalls and Global Protect VPNExperience with Microsoft Active Directory and Azure AD.Experience with SSO platforms (Okta, OneLogin, etc.). Experience working in AWS.Experience with Secrets Managements solutions. Experience with managing and securing SaaS applications. Experience with SIEM solutions (Chronicle, ELK). Experience with notification systems (Opsgenie, PagerDuty, etc.). Good public speaking and presentation skills. Interpersonal skills and ability to interact and work with staff at all levels. Excellent written and verbal communication skills. Ability to work independently and in a team environment. Ability to pay attention to details and be organized. Ability to project professionalism over the phone and in person. Ability to handle multiple tasks in a fast-paced environment. Commitment to “internal client” and customer service principles. Willingness to take initiative and to follow through on projects. Creative writing ability. Excellent time management skills, with the ability to prioritize and multi-task, and work under shifting deadlines in a fast-paced environment. Must have legal right to work in the U.S.

At SiriusXM, we carefully consider a wide range of factors when determining compensation, including your background and experience. These considerations can cause your compensation to vary. We expect the base salary for this position to be in the range of $73,600 to $158,400 and will depend on your skills, qualifications, and experience. Additionally, this role might be eligible for discretionary short-term and long-term incentives. We encourage all interested candidates to apply.

Our goal at SiriusXM+Pandora is to provide and maintain a work environment that fosters mutual respect, professionalism and cooperation. SiriusXM+Pandora is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex, gender identity, marital status, familial status, veteran status, sexual orientation or any other characteristic protected by applicable federal, state or local laws.

The requirements and duties described above may be modified or waived by the Company in its sole discretion without notice.

R-2024-04-37