Senior Security Engineer på Epidemic Sound i Stockholm
Epidemic Sound · Stockholm
Senior Security Engineer
Join our global force of 400+ innovators, blending the latest in tech with the greatest in soundtracking, from our Stockholm HQ to
offices in London, New York, ...
Join our global force of 400+ innovators, blending the latest in tech with the greatest in soundtracking, from our Stockholm HQ to
offices in London, New York, Los Angeles, Berlin, Paris, Oslo, and Seoul. We’re an industry leader with a startup mentality. We
take what we do seriously, but we don’t take ourselves too seriously. Creating and collaborating to transform the sound of
streaming, content, and culture. Come join us, and let the world feel your work.
As a Security Engineer at Epidemic Sound, you will help keep the company safe across three connected surfaces: the products our
customers use, the platform our engineers build on, and the systems our employees rely on every day. This is a broad, generalist
role where your work directly shapes how an industry-leading company with a startup mentality manages risk and builds securely at
scale.
Building security automations and custom AI agents is a normal part of how the team operates, and you will be expected to do the
same. You will sit within the Business Tech Division and report to the Head of Security, working closely with engineers, SRE, IT,
Legal, and People teams across the organisation.
YOUR KEY RESPONSIBILITIES INCLUDE
Own the vulnerability management programme across our products, cloud, and corporate estate: discovery, prioritisation,
remediation tracking, and reporting.
Consolidate findings across our detection stack into a single risk picture.
Partner with software engineers to grow the Secure Software Development Lifecycle, including code reviews, threat models, and
pre-ship security input.
Harden the GCP estate, Kubernetes platform, and CI/CD systems our engineers depend on.
Run vendor security reviews and respond to enterprise customer security questionnaires.
Operate and tune the Elastic SIEM and broader detection stack, building new detections as the threat picture evolves.
Respond to security incidents including on-call, and run training exercises to keep the team ready.
Build and run security agents and automations that other engineers and the wider business rely on, treating them as
production-grade software.
Evaluate AI models and frameworks against security standards.
REQUIREMENTS
Around five years in security engineering, with depth in at least one of application security, infrastructure security,
enterprise security, or vulnerability management, and solid breadth across the others.
Hands-on experience running or contributing to a vulnerability management programme, including prioritisation, SLA setting,
remediation tracking, and reporting.
Working knowledge of SCA/SAST tooling, Internal Developer Portals, and SIEM; we use Snyk, Port, and Elastic.
Working knowledge of the security features of the major public cloud providers, with GCP preferred.
Comfort with Kubernetes, Docker, or other container architectures.
Confident with at least one programming or scripting language such as Python, Go, or Bash.
Solid experience with Git, GitHub Actions, and Terraform.
Active, daily use of AI and agentic tools, with concrete examples of agents you have built and outputs you have shipped.
Experience with vendor security questionnaires.
Familiarity with common security frameworks such as PCI DSS and NIST.
IT WOULD ALSO BE MUSIC TO OUR EARS IF YOU HAVE
Penetration testing background or OWASP Top 10 fluency.
Experience with CI/CD security hardening at scale.
A track record of building security tools other engineers want to use.
Experience reporting vulnerability management and security posture metrics to leadership.
Familiarity with social engineering attacks, especially phishing, and the controls that reduce them.
Equal opportunity employer
We believe that bringing people together from different backgrounds, experiences and perspectives makes for a healthy workplace, a
more successful business and a better world. We value diversity and encourage everyone to come and soundtrack the world with us.
Application
Ready to make the world feel your work? Please apply, in English.
Job Description
Join our Cyber Security Engineering unit, where innovation and security drive us. We are transforming technology with modern Network Security, integrations and cloud services. We are looking for a highly skilled and experienced Senior Cyber Security Engineer to join our Network Security Engineering team. This role involves architecting, designing, implementing, and maintaining robust security measures to protect our global network infrastructure. The ideal candidate will blend theoretical knowledge with hands-on expertise. This role requires a deep understanding of cybersecurity principles, Network Security technologies, and the ability to collaborate across multiple globally dispersed stakeholders and teams.
WHAT YOU’LL DO
Lead the development, optimization and integration of network security policies, rules and monitoring across platforms such as NDR, SSE, SD‑WAN and proxy solutions
Design and improve network security solutions across branches, stores and data centers, ensuring strong alignment with business and security needs
Conduct security architecture reviews, risk assessments and threat modelling, and drive hardening initiatives across our network landscape
Modernize network security by transitioning from legacy systems to modern SSE and ZTNA solutions, supported by clear roadmaps, policies and plans
Monitor and enhance the performance, availability and reliability of network security solutions, ensuring compliance with ISO, NIST, GDPR and internal standards
Design, configure and troubleshoot network security devices and services across on‑prem and cloud environments, providing advanced Level‑3 support when needed
WHO YOU'LL WORK WITH
You’ll join a friendly and collaborative Network Security Engineering team of seven, soon to be eight, working closely with colleagues across Business Tech. Your daily partners will include network SMEs, Cyber Security Advisors, Core Platforms and Global Infrastructure Services, as well as teams supporting stores, warehouses and new market entries. You’ll also connect with external partners and contribute to cross‑functional projects where network and cyber security come together. This is a highly collaborative environment where your expertise will help shape our security posture and uplift the team’s cyber maturity.
WHO YOU ARE
6+ years of experience in cybersecurity engineering, with a focus on network environments
Strong, practical knowledge of: Network security technologies (firewalls, IDS/IPS, SWG, SASE, VPN, CASB, ZTNA), Cloud platforms: Azure, GCP, Security architecture methodologies and governance frameworks
Expertise in network security solutions and products provided by Cisco, HP Aruba, Zscaler and Citrix NetScaler (proven by certificates)
Strong knowledge of risk assessment and security control frameworks (ISO 27001, NIST).
Familiarity with security maturity models including C2M2
Excellent ability to translate security requirements into implementable engineering solutions.
Strong understanding of IP networking and protocols, including IPsec, HSRP, BGP, OSPF, 802.11, and QoS.
Understand regulatory and compliance requirements (GDPR, PCI-DSS, Schrems, etc.).
Independent problem-solving, addressing complex security challenges with minimal supervision.
Preferred qualifications:
CCNP (Security) or higher-level certifications such as the CCIE.
CISSP or OSCP security certifications.
Azure Security Engineer, or GCP Security Engineer certification.
Experience with Agile methodologies and tools (e.g., Jira/Confluence)
WHO WE ARE
H&M is a fashion brand that offers the latest styles and inspiration, from fashion pieces and unique designer collaborations to affordable wardrobe essentials. Our business idea is fashion & quality at the best price in a sustainable way. Learn more about H&M here.
WHY YOU’LL LOVE WORKING HERE
Benefits
All our employees are included in our H&M Incentive Program (HIP)
All our employees receive a staff discount card, which is usable on all our H&M Group brands in stores and online. Brands covered by the discount are H&M (Beauty and Move included), COS, Weekday, Monki, H&M HOME, & Other Stories, ARKET.
Work-life balance, 30 days’ vacation and wellness allowance 4000 SEK/yearly
Access to Benify, for discounts on e.g. Gym memberships, travel, hotels and many other great deals.
Compensation boost during parental leave
In addition to our global benefits, all our local markets offer different competitive perks and benefits. Please note that they may differ between employment type and countries.
Inclusion & Diversity
H&M is a part of H&M Group. At H&M Group, we’re determined to create and maintain inclusive, diverse and equitable workplaces throughout our organization. Our teams should consist of a variety of people that share and combine their knowledge, experience and ideas. Having a diverse workforce leads to a positive impact on how we address challenges, on what we perceive possible and on how we choose to relate to our colleagues and customers all over the world. Hence all diversity dimensions are taken into consideration in our recruitment process.
We are committed to a recruitment process that is fair, equitable, and based on competency. We therefore kindly ask you to not attach a cover letter in your application.
Job Description
Join our Cyber Security Engineering unit, where innovation and security drive us. We are transforming technology with modern Network Security, integrations and cloud services. We are looking for a highly skilled and experienced Senior Cyber Security Engineer to join our Network Security Engineering team. This role involves architecting, designing, implementing, and maintaining robust security measures to protect our global network infrastructure. The ideal candidate will blend theoretical knowledge with hands-on expertise. This role requires a deep understanding of cybersecurity principles, Network Security technologies, and the ability to collaborate across multiple globally dispersed stakeholders and teams.
WHAT YOU’LL DO
Lead the development, optimization and integration of network security policies, rules and monitoring across platforms such as NDR, SSE, SD‑WAN and proxy solutions
Design and improve network security solutions across branches, stores and data centers, ensuring strong alignment with business and security needs
Conduct security architecture reviews, risk assessments and threat modelling, and drive hardening initiatives across our network landscape
Modernize network security by transitioning from legacy systems to modern SSE and ZTNA solutions, supported by clear roadmaps, policies and plans
Monitor and enhance the performance, availability and reliability of network security solutions, ensuring compliance with ISO, NIST, GDPR and internal standards
Design, configure and troubleshoot network security devices and services across on‑prem and cloud environments, providing advanced Level‑3 support when needed
WHO YOU'LL WORK WITH
You’ll join a friendly and collaborative Network Security Engineering team of seven, soon to be eight, working closely with colleagues across Business Tech. Your daily partners will include network SMEs, Cyber Security Advisors, Core Platforms and Global Infrastructure Services, as well as teams supporting stores, warehouses and new market entries. You’ll also connect with external partners and contribute to cross‑functional projects where network and cyber security come together. This is a highly collaborative environment where your expertise will help shape our security posture and uplift the team’s cyber maturity.
WHO YOU ARE
6+ years of experience in cybersecurity engineering, with a focus on network environments
Strong, practical knowledge of: Network security technologies (firewalls, IDS/IPS, SWG, SASE, VPN, CASB, ZTNA), Cloud platforms: Azure, GCP, Security architecture methodologies and governance frameworks
Expertise in network security solutions and products provided by Cisco, HP Aruba, Zscaler and Citrix NetScaler (proven by certificates)
Strong knowledge of risk assessment and security control frameworks (ISO 27001, NIST).
Familiarity with security maturity models including C2M2
Excellent ability to translate security requirements into implementable engineering solutions.
Strong understanding of IP networking and protocols, including IPsec, HSRP, BGP, OSPF, 802.11, and QoS.
Understand regulatory and compliance requirements (GDPR, PCI-DSS, Schrems, etc.).
Independent problem-solving, addressing complex security challenges with minimal supervision.
Preferred qualifications:
CCNP (Security) or higher-level certifications such as the CCIE.
CISSP or OSCP security certifications.
Azure Security Engineer, or GCP Security Engineer certification.
Experience with Agile methodologies and tools (e.g., Jira/Confluence)
WHO WE ARE
H&M is a fashion brand that offers the latest styles and inspiration, from fashion pieces and unique designer collaborations to affordable wardrobe essentials. Our business idea is fashion & quality at the best price in a sustainable way. Learn more about H&M here.
WHY YOU’LL LOVE WORKING HERE
Benefits
All our employees are included in our H&M Incentive Program (HIP)
All our employees receive a staff discount card, which is usable on all our H&M Group brands in stores and online. Brands covered by the discount are H&M (Beauty and Move included), COS, Weekday, Monki, H&M HOME, & Other Stories, ARKET.
Work-life balance, 30 days’ vacation and wellness allowance 4000 SEK/yearly
Access to Benify, for discounts on e.g. Gym memberships, travel, hotels and many other great deals.
Compensation boost during parental leave
In addition to our global benefits, all our local markets offer different competitive perks and benefits. Please note that they may differ between employment type and countries.
Inclusion & Diversity
H&M is a part of H&M Group. At H&M Group, we’re determined to create and maintain inclusive, diverse and equitable workplaces throughout our organization. Our teams should consist of a variety of people that share and combine their knowledge, experience and ideas. Having a diverse workforce leads to a positive impact on how we address challenges, on what we perceive possible and on how we choose to relate to our colleagues and customers all over the world. Hence all diversity dimensions are taken into consideration in our recruitment process.
We are committed to a recruitment process that is fair, equitable, and based on competency. We therefore kindly ask you to not attach a cover letter in your application.
Job Description
Join our Cyber Security Engineering unit, where innovation and security drive us. We are transforming technology with modern Network Security, integrations and cloud services. We are looking for a highly skilled and experienced Senior Cyber Security Engineer to join our Network Security Engineering team. This role involves architecting, designing, implementing, and maintaining robust security measures to protect our global network infrastructure. The ideal candidate will blend theoretical knowledge with hands-on expertise. This role requires a deep understanding of cybersecurity principles, Network Security technologies, and the ability to collaborate across multiple globally dispersed stakeholders and teams.
WHAT YOU’LL DO
Lead the development, optimization and integration of network security policies, rules and monitoring across platforms such as NDR, SSE, SD‑WAN and proxy solutions
Design and improve network security solutions across branches, stores and data centers, ensuring strong alignment with business and security needs
Conduct security architecture reviews, risk assessments and threat modelling, and drive hardening initiatives across our network landscape
Modernize network security by transitioning from legacy systems to modern SSE and ZTNA solutions, supported by clear roadmaps, policies and plans
Monitor and enhance the performance, availability and reliability of network security solutions, ensuring compliance with ISO, NIST, GDPR and internal standards
Design, configure and troubleshoot network security devices and services across on‑prem and cloud environments, providing advanced Level‑3 support when needed
WHO YOU'LL WORK WITH
You’ll join a friendly and collaborative Network Security Engineering team of seven, soon to be eight, working closely with colleagues across Business Tech. Your daily partners will include network SMEs, Cyber Security Advisors, Core Platforms and Global Infrastructure Services, as well as teams supporting stores, warehouses and new market entries. You’ll also connect with external partners and contribute to cross‑functional projects where network and cyber security come together. This is a highly collaborative environment where your expertise will help shape our security posture and uplift the team’s cyber maturity.
WHO YOU ARE
6+ years of experience in cybersecurity engineering, with a focus on network environments
Strong, practical knowledge of: Network security technologies (firewalls, IDS/IPS, SWG, SASE, VPN, CASB, ZTNA), Cloud platforms: Azure, GCP, Security architecture methodologies and governance frameworks
Expertise in network security solutions and products provided by Cisco, HP Aruba, Zscaler and Citrix NetScaler (proven by certificates)
Strong knowledge of risk assessment and security control frameworks (ISO 27001, NIST).
Familiarity with security maturity models including C2M2
Excellent ability to translate security requirements into implementable engineering solutions.
Strong understanding of IP networking and protocols, including IPsec, HSRP, BGP, OSPF, 802.11, and QoS.
Understand regulatory and compliance requirements (GDPR, PCI-DSS, Schrems, etc.).
Independent problem-solving, addressing complex security challenges with minimal supervision.
Preferred qualifications:
CCNP (Security) or higher-level certifications such as the CCIE.
CISSP or OSCP security certifications.
Azure Security Engineer, or GCP Security Engineer certification.
Experience with Agile methodologies and tools (e.g., Jira/Confluence)
WHO WE ARE
H&M is a fashion brand that offers the latest styles and inspiration, from fashion pieces and unique designer collaborations to affordable wardrobe essentials. Our business idea is fashion & quality at the best price in a sustainable way. Learn more about H&M here.
WHY YOU’LL LOVE WORKING HERE
Benefits
All our employees are included in our H&M Incentive Program (HIP)
All our employees receive a staff discount card, which is usable on all our H&M Group brands in stores and online. Brands covered by the discount are H&M (Beauty and Move included), COS, Weekday, Monki, H&M HOME, & Other Stories, ARKET.
Work-life balance, 30 days’ vacation and wellness allowance 4000 SEK/yearly
Access to Benify, for discounts on e.g. Gym memberships, travel, hotels and many other great deals.
Compensation boost during parental leave
In addition to our global benefits, all our local markets offer different competitive perks and benefits. Please note that they may differ between employment type and countries.
Inclusion & Diversity
H&M is a part of H&M Group. At H&M Group, we’re determined to create and maintain inclusive, diverse and equitable workplaces throughout our organization. Our teams should consist of a variety of people that share and combine their knowledge, experience and ideas. Having a diverse workforce leads to a positive impact on how we address challenges, on what we perceive possible and on how we choose to relate to our colleagues and customers all over the world. Hence all diversity dimensions are taken into consideration in our recruitment process.
We are committed to a recruitment process that is fair, equitable, and based on competency. We therefore kindly ask you to not attach a cover letter in your application.
