About Muse Group
Muse Group creates popular apps for playing, recording, and composing music, along with music learning tools, music catalogs, and free open-source software. Hal Leonard, which joined Muse Group in 2023, publishes sheet music and music education materials and distributes musical instruments, gear, and software worldwide.
Responsibilities
•Embed security by default into IT services
•Work closely with the IT Operations and Application Management teams
•Improve efficiency and user experience through AI automation
Requirements
•More than 6 years of hands-on experience in information security or IT infrastructure, with a strong technical background
•Understand web and mobile application vulnerabilities and secure coding practices, including OWASP Top 10
•Identify, explain, and mitigate risks based on the OWASP framework
•Be familiar with OWASP ASVS for security requirements and testing
•Have practical knowledge of ISO 27001 and CIS Critical Security Controls (CIS18) or similar frameworks
•Have experience running or supporting internal or external security audits
•Have working knowledge of SIEM concepts and tools, secure SDLC / DevSecOps practices, vulnerability management, EDR, and identity and access management
•Understand Zero Trust architecture principles and how to sequence their adoption
•Have strong written English and be able to produce clear, business-facing documentation and recommendations
Nice to have
•Experience in a multi-product SaaS or consumer software company
•Exposure to GDPR or data-privacy work
•Familiarity with CrowdStrike Falcon, Invicti, or comparable EDR / vulnerability-scanning tools
•Relevant certifications such as CompTIA Security+, CSSLP, CISM, ISO 27001 Lead Auditor/Implementer, or CISA
Conditions
•Hybrid schedule: 3 days on-site and 2 days remote
