Senior Security Engineer

We are seeking an experienced Senior Security Engineer to join Orfium’s Cloud & Infrastructure team. In this role, you will help strengthen the security of our cloud platforms, infrastructure, engineering practices, and internal systems while supporting the continued maturity of our Information Security programme.

You will work closely with Cloud & Infra, Engineering, IT Operations, Legal, and business stakeholders to drive practical security improvements across areas such as cloud security, access governance, vulnerability management, security assessments, incident response, compliance, and security awareness.

Responsibilities 

• Support the execution of Orfium’s cloud security strategy and roadmap by creating and supporting security controls across our cloud platforms and workloads
• Improve the security posture of Orfium’s cloud infrastructure, internal systems, and engineering platforms.
• Partner with Cloud & Infrastructure and Engineering teams on secure architecture, cloud security controls, GitHub security, secrets management, and secure coding practices.
• Support ISO 27001, SOC 2, ISMS, audit readiness, evidence collection, and security governance activities.
• Run and coordinate security assessments, vulnerability reviews, penetration testing activities, and remediation follow-ups.
• Manage and improve security tooling and processes across areas such as vulnerability scanning, access governance, endpoint/security controls, and compliance monitoring.
• Define, maintain, and test incident response processes, including tabletop exercises and security incident coordination.
• Support business continuity, disaster recovery, vendor security reviews, and risk assessments.
• Collaborate with IT Operations on identity, access management, admin access, onboarding/offboarding controls, and security-related tooling.
• Deliver or support security awareness initiatives, helping employees understand threats such as phishing, social engineering, password security, device security, and safe internet practices.
• Work with Legal and business teams to ensure security obligations, contractual requirements, and notification processes are understood and followed.
• Stay up to date with emerging threats, security trends, and cloud security best practices, and translate them into practical improvements for Orfium.

• 5+ years of experience in security engineering, cloud security, infrastructure security, or a similar role.
• Strong understanding of cloud security, networking, IAM, application security, vulnerability management, and incident response.
• Hands-on experience working with engineering and infrastructure teams to design and implement secure systems.
• Experience with ISO 27001, SOC 2, security audits, risk assessments, and compliance-related activities.
• Familiarity with security tooling such as vulnerability scanners, cloud security controls, endpoint/security platforms, and access governance tools.
• Ability to investigate security issues, coordinate remediation, and communicate risks clearly to technical and non-technical stakeholders.
• Strong problem-solving skills, autonomy, ownership, and ability to manage multiple priorities.
• Ability to collaborate effectively with cross-functional teams, including Cloud & Infra, Engineering, IT Operations, Legal, and People teams.
• Fluent English language communication skills, written and verbal.

Nice to Have

• Experience supporting security in SaaS, product, and data-heavy technology environments.
• Experience with AWS, GCP, GitHub security, CI/CD security, WAF, secrets management, or secure software development practices.
• Familiarity with security awareness programmes, phishing response, tabletop exercises, and BCP/DRP processes.
• Experience with vendor security questionnaires, third-party risk, or customer security requirements.
• Security certifications such as CISSP, CISM, CCSP, Security+, AWS Security Specialty, or similar.
• Love for music!

We are a global technology leader transforming the music and entertainment industry through advanced rights management and data solutions. With 450+ team members across offices in Los Angeles, London, Dublin, Athens, Sofia, Tokyo, and more, we partner with top-tier clients such as Sony Music Publishing, Warner Music Group, BBC, and Universal Music Publishing. Our mission is to help creators, rights holders, and media companies track, manage, and monetize content across platforms like YouTube. At Orfium, you’ll join a passionate, international team of developers, designers, scientists, and music lovers, all working together in a flexible, hybrid environment where innovation, openness, and ownership are at the heart of everything we do. We are looking forward to meeting with you!

Benefits

💰 Competitive salary package and participation in our Stock Options plan

🏠 Hybrid work model with flexibility to support your lifestyle

🏥 Comprehensive private health and life insurance coverage

🌴 Extra paid time off to recharge and take care of yourself

💻 The latest tech equipment to support your productivity and creativity

🌍 A collaborative, inclusive, and international work environment

EEO / Accommodation

At Orfium, we are proud to be an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees and candidates—regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. If you require any accommodations during the application or interview process, please let us know. We’re here to ensure you have a comfortable and fair experience every step of the way.