Job Information
SiriusXM Senior Offensive Security Engineer in Seattle, Washington
Who We Are: SiriusXM and its brands (Pandora, SiriusXM Media, AdsWizz, Simplecast, and SiriusXM Connect) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners -- in the car, at home, and anywhere on the go with connected devices. Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are. This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world. Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting. No matter their individual role, each of our employees plays a vital part in bringing SiriusXM's vision to life every day. SiriusXM is the leading audio entertainment company in North America, and the premier programmer and platform for subscription and digital advertising-supported audio products. SiriusXM's platforms collectively reach approximately 150 million listeners, the largest digital audio audience across paid and free tiers in North America, and deliver music, sports, talk, news, comedy, entertainment and podcasts. Pandora, a subsidiary of SiriusXM, is the largest ad-supported audio entertainment streaming service in the U.S. SiriusXM's subsidiaries Simplecast and AdsWizz make it a leader in podcast hosting, production, distribution, analytics and monetization. The Company's advertising sales organization, which operates as SiriusXM Media, leverages its scale, cross-platform sales organization and ad tech capabilities to deliver results for audio creators and advertisers. SiriusXM, through SiriusXM Canada Holdings, Inc., also offers satellite radio and audio entertainment in Canada. In addition to its audio entertainment businesses, SiriusXM offers connected vehicle services to automakers. How you'll make an impact: SiriusXM's Security Operations Center is seeking an experienced Offensive Security Engineer to ensure the security of our organization's systems and applications. The successful candidate will be responsible for performing security assessments, identifying, and verifying vulnerabilities, reviewing threat intelligence, and recommending appropriate solutions. The Offensive Security Engineer will also be responsible for threat hunting, triage and management of findings from our bug bounty program and providing guidance for security best practices. What you'll do: Perform or manage various types of offensive security tests to identify potential risks, including: Network, Mobile, and Application Penetration Testing Source Code Reviews Cloud Security Assessments Attack Surface Management Adversarial Simulation/Red Teaming Vulnerability Assessments Hardware/Device Security assessments Test and validate security controls protecting production systems. Investigate and evaluate risks identified from threat intelligence sources. Triage, prioritize and investigate findings received from our bug bounty program, and coordinate with internal stakeholders for remediation efforts. Analyze and evaluate security vulnerabilities, identifying and classifying possible threats. Help implement best practices to improve system and application security. Develop detailed reports to document findings and recommend solutions. Present findings and recommendations to stakeholders and partners. Ensure compliance with applicable regulations and industry standards by conducting tests and testing procedures. Help the Incident Response team to assess and respond to security events by performing threat hunting and intelligence gathering. Au