Universal Music Group Jobs Hiring Now
Universal Music Group is hiring for 69 open roles on Migrate Mate as of July 16, 2026, concentrated in business analysis and business strategy, with listed salaries up to about $425,000. Migrate Mate updates Universal Music Group's live openings daily. Universal Music Group is a global music company that signs, develops, and distributes artists across recorded music, music publishing, and related entertainment businesses.
Find Universal Music Group JobsOverview
Universal Music Group hiring data on Migrate Mate, as of July 16, 2026.
- Open jobs
- 69
- Top team
- Business Analysis
- Seniority
- Manager level or above
- Work type
- 1% remote or hybrid
- Top location
- Santa Monica
- Salary range
- $39,000–$425,000
Listed salaries for Universal Music Group roles on Migrate Mate range from about $39,000 to $425,000 per year across 69 open roles, as of July 16, 2026.
Open Roles at Universal Music Group
Showing 25 of 69+ Universal Music Group jobs
We are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.
How we LEAD:
We are currently seeking an Application Security Engineer to join UMG's global Tech Security & Identity organization. Reporting to the Manager, Security Engineering and Vulnerability, this role is responsible for improving the security of internally developed applications and cloud services by partnering closely with engineering, infrastructure, and product teams to integrate security throughout the software development lifecycle.
The Application Security Engineer will serve as a trusted technical advisor, performing application security assessments, supporting secure software development practices, and helping engineering teams identify and address security risks early in the development process. This role combines hands-on technical expertise with collaboration across development and security teams to strengthen UMG's application security posture while enabling innovation.
The ideal candidate has experience in application security, secure software development, cloud-native technologies, and developer enablement, along with strong communication skills and a passion for building secure software.
How you'll CREATE:
Perform application security assessments, threat modeling, and secure design reviews for internally developed and third-party applications.
Conduct application security testing using static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), API security testing, and manual validation techniques.
Review source code and provide secure coding guidance based on OWASP best practices and secure development principles.
Partner with software engineering teams to identify security risks and recommend practical remediation strategies throughout the software development lifecycle.
Collaborate with DevOps teams to integrate application security testing into CI/CD pipelines and software delivery workflows.
Provide security architecture guidance for new applications, APIs, cloud-native services, and technology integrations.
Support implementation of modern authentication and authorization technologies, including OAuth, OpenID Connect (OIDC), SAML, and other identity standards.
Evaluate, implement, and maintain application security tools and help improve security testing coverage across the development lifecycle.
Develop automation and scripting to improve application security testing, reporting, and engineering workflows.
Participate in security reviews for new technologies, cloud services, and third-party applications.
Support investigation and remediation of application-layer security incidents and vulnerabilities when required.
Create reusable security guidance, reference architectures, and technical documentation to improve secure development practices across engineering teams.
Deliver secure coding guidance and developer education to promote security-by-design principles.
Collaborate with security, infrastructure, and identity teams to continuously improve enterprise application security capabilities.
Bring your VIBE:
Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
5+ years of experience in Application Security, Security Engineering, Software Engineering, or a related discipline with a security focus.
Experience performing application security assessments, threat modeling, and secure architecture reviews.
Strong understanding of secure coding principles and common application vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.
Experience with application security testing technologies including SAST, DAST, SCA, API security testing, and penetration testing methodologies.
Experience working with modern application architectures, REST APIs, microservices, and cloud-native technologies.
Experience integrating security into CI/CD pipelines and DevSecOps workflows.
Experience working within AWS, Azure, or Google Cloud Platform environments.
Knowledge of modern authentication and authorization technologies including OAuth, OpenID Connect (OIDC), SAML, and JWT.
Understanding of security frameworks and standards including OWASP, NIST Cybersecurity Framework, and ISO 27001.
Strong analytical, problem-solving, and communication skills with the ability to work effectively across technical and non-technical teams.
Desirable Qualifications
Experience implementing Secure Software Development Lifecycle (SSDLC) practices within Agile development environments.
Experience with application security platforms such as GitHub Advanced Security, Microsoft Defender for Cloud, Checkmarx, Veracode, Burp Suite, Semgrep, or similar tools.
Experience with container security, Kubernetes, and Infrastructure as Code security.
Experience developing automation using Python, PowerShell, or similar scripting languages.
Experience performing security assessments of cloud-native applications and APIs.
Professional certifications such as CSSLP, GIAC GWEB, AWS Certified Security Specialty, Security+, CISSP, or equivalent.
Experience working within large global enterprise environments.
Experience in media, entertainment, or similarly distributed global organizations.
Perks Playlist:
Join an entrepreneurial, global organization where authenticity, boldness, creativity, connection, drive, and insight aren’t just values—they’re how we work every day. Here are some of the ways we support you along the way (and just a few of the benefits we offer):
Comprehensive medical, dental, and vision coverage
Including 100% coverage for out-patient in-network mental health services
Fertility coverage for eligible medical plan participants
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)
Student Loan Repayment Assistance and Tuition Reimbursement
401(k) with 100% immediate vesting on the first 5% of your contributions, plus an additional UMG contribution
A variety of ways to prioritize much-needed time away from work including:
Flexible Paid Time Off (PTO) for exempt employees
3-weeks PTO for non-exempt employees
2-weeks paid Winter Break
10 Company Holidays (including Juneteenth and Wellbeing Day)
Summer Fridays (between Memorial Day and Labor Day)
Generous paid parental leave for every type of parent
Check out our full overview of benefits on the Perks Playlist page of the career site.
Disclaimer: This job description only provides an overview of job responsibilities that are subject to change.
Universal Music Group is an Equal Opportunity Employer
We are an E-Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah.
Please note, UMG is not enrolled in E-Verify in California and New York, and cannot support employment of candidates whose employer must enroll in E-Verify, for example candidates on STEM-OPT.
For more information, please click on the following links.
E-Verify Participation Poster: English / Spanish
E-Verify Right to Work Poster: English | Spanish
Job Category:
TechnologyWe are UMG, the Universal Music Group. We are the world’s leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.
How we LEAD:
We are currently seeking an Application Security Engineer to join UMG's global Tech Security & Identity organization. Reporting to the Manager, Security Engineering and Vulnerability, this role is responsible for improving the security of internally developed applications and cloud services by partnering closely with engineering, infrastructure, and product teams to integrate security throughout the software development lifecycle.
The Application Security Engineer will serve as a trusted technical advisor, performing application security assessments, supporting secure software development practices, and helping engineering teams identify and address security risks early in the development process. This role combines hands-on technical expertise with collaboration across development and security teams to strengthen UMG's application security posture while enabling innovation.
The ideal candidate has experience in application security, secure software development, cloud-native technologies, and developer enablement, along with strong communication skills and a passion for building secure software.
How you'll CREATE:
Perform application security assessments, threat modeling, and secure design reviews for internally developed and third-party applications.
Conduct application security testing using static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), API security testing, and manual validation techniques.
Review source code and provide secure coding guidance based on OWASP best practices and secure development principles.
Partner with software engineering teams to identify security risks and recommend practical remediation strategies throughout the software development lifecycle.
Collaborate with DevOps teams to integrate application security testing into CI/CD pipelines and software delivery workflows.
Provide security architecture guidance for new applications, APIs, cloud-native services, and technology integrations.
Support implementation of modern authentication and authorization technologies, including OAuth, OpenID Connect (OIDC), SAML, and other identity standards.
Evaluate, implement, and maintain application security tools and help improve security testing coverage across the development lifecycle.
Develop automation and scripting to improve application security testing, reporting, and engineering workflows.
Participate in security reviews for new technologies, cloud services, and third-party applications.
Support investigation and remediation of application-layer security incidents and vulnerabilities when required.
Create reusable security guidance, reference architectures, and technical documentation to improve secure development practices across engineering teams.
Deliver secure coding guidance and developer education to promote security-by-design principles.
Collaborate with security, infrastructure, and identity teams to continuously improve enterprise application security capabilities.
Bring your VIBE:
Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
5+ years of experience in Application Security, Security Engineering, Software Engineering, or a related discipline with a security focus.
Experience performing application security assessments, threat modeling, and secure architecture reviews.
Strong understanding of secure coding principles and common application vulnerabilities, including the OWASP Top 10 and OWASP API Security Top 10.
Experience with application security testing technologies including SAST, DAST, SCA, API security testing, and penetration testing methodologies.
Experience working with modern application architectures, REST APIs, microservices, and cloud-native technologies.
Experience integrating security into CI/CD pipelines and DevSecOps workflows.
Experience working within AWS, Azure, or Google Cloud Platform environments.
Knowledge of modern authentication and authorization technologies including OAuth, OpenID Connect (OIDC), SAML, and JWT.
Understanding of security frameworks and standards including OWASP, NIST Cybersecurity Framework, and ISO 27001.
Strong analytical, problem-solving, and communication skills with the ability to work effectively across technical and non-technical teams.
Desirable Qualifications
Experience implementing Secure Software Development Lifecycle (SSDLC) practices within Agile development environments.
Experience with application security platforms such as GitHub Advanced Security, Microsoft Defender for Cloud, Checkmarx, Veracode, Burp Suite, Semgrep, or similar tools.
Experience with container security, Kubernetes, and Infrastructure as Code security.
Experience developing automation using Python, PowerShell, or similar scripting languages.
Experience performing security assessments of cloud-native applications and APIs.
Professional certifications such as CSSLP, GIAC GWEB, AWS Certified Security Specialty, Security+, CISSP, or equivalent.
Experience working within large global enterprise environments.
Experience in media, entertainment, or similarly distributed global organizations.
Perks Playlist:
Join an entrepreneurial, global organization where authenticity, boldness, creativity, connection, drive, and insight aren’t just values—they’re how we work every day. Here are some of the ways we support you along the way (and just a few of the benefits we offer):
Comprehensive medical, dental, and vision coverage
Including 100% coverage for out-patient in-network mental health services
Fertility coverage for eligible medical plan participants
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and so much more (up to $720/year)
Student Loan Repayment Assistance and Tuition Reimbursement
401(k) with 100% immediate vesting on the first 5% of your contributions, plus an additional UMG contribution
A variety of ways to prioritize much-needed time away from work including:
Flexible Paid Time Off (PTO) for exempt employees
3-weeks PTO for non-exempt employees
2-weeks paid Winter Break
10 Company Holidays (including Juneteenth and Wellbeing Day)
Summer Fridays (between Memorial Day and Labor Day)
Generous paid parental leave for every type of parent
Check out our full overview of benefits on the Perks Playlist page of the career site.
Disclaimer: This job description only provides an overview of job responsibilities that are subject to change.
Universal Music Group is an Equal Opportunity Employer
We are an E-Verify employer in Alabama, Arizona, Georgia, Mississippi, North Carolina, South Carolina, Tennessee, and Utah.
Please note, UMG is not enrolled in E-Verify in California and New York, and cannot support employment of candidates whose employer must enroll in E-Verify, for example candidates on STEM-OPT.
For more information, please click on the following links.
E-Verify Participation Poster: English / Spanish
E-Verify Right to Work Poster: English | Spanish
Job Category:
TechnologyJob Roles at Universal Music Group
Working at Universal Music Group
Universal Music Group's 69 open roles are manager level or above, and about 1% are remote or hybrid. The most active teams are business analysis, business strategy, and account management. Universal Music Group operates across recorded music, music publishing, and artist services, with teams spanning creative, marketing, finance, technology, and operations. Roles range from royalty analysis and digital content to machine learning and motion design, reflecting a business that combines creative and commercial functions at scale. Most Universal Music Group roles are based in Santa Monica, with some in New York and Nashville.
Explore more roles by function
Browse thousands of live openings across engineering, sales, product, and more, and apply in just a few clicks.
Browse jobs by roleUniversal Music Group Jobs: Frequently Asked Questions
How many jobs is Universal Music Group hiring for right now?
Universal Music Group is hiring for 69 open roles on Migrate Mate as of July 16, 2026, updated daily, concentrated in business analysis and business strategy. Open positions span creative, marketing, finance, technology, and operations functions, reflecting the breadth of a large music and entertainment business.
What kinds of roles does Universal Music Group hire for?
The most active teams are business analysis, business strategy, and account management. Universal Music Group posts roles across marketing, finance, product, design, and operations, including positions like royalty analyst, motion designer, digital content specialist, machine learning scientist, and product manager. Most postings are manager level or above, though junior and associate-level openings appear as well.
Are Universal Music Group jobs remote or in-person?
Mostly on-site. About 1% of Universal Music Group's open roles on Migrate Mate are remote or hybrid as of July 16, 2026, with the rest based in Santa Monica. Each Universal Music Group listing shows its work location so you can filter before applying.
How do I apply to a job at Universal Music Group?
Find a role that fits your background among Universal Music Group's openings on Migrate Mate, then follow the listing through to Universal Music Group's own careers page to submit your application directly. Universal Music Group manages its own hiring process, so all applications, interviews, and offers are handled by their internal recruiting team.
What do Universal Music Group jobs pay?
Listed salaries for Universal Music Group roles on Migrate Mate range from about $39,000 to $425,000 per year as of July 16, 2026, with most postings at manager level or above. Exact pay is set by Universal Music Group and shown on each listing.
Does Universal Music Group hire entry-level?
Most of Universal Music Group's open roles on Migrate Mate are manager level or above as of July 16, 2026. Entry-level openings are limited. Check individual Universal Music Group listings for stated experience requirements.
Where is Universal Music Group hiring?
Most Universal Music Group roles are based in Santa Monica, with some in New York and Nashville, and about 1% offer remote or hybrid work as of July 16, 2026. Migrate Mate shows the location on each listing.