Security Architect, SiriusXM Radio, Washington, DC
SiriusXM Radio -
Washington, DC,
US
Security Architect
Date Posted: 2024-06-01
Job description
Who We Are:SiriusXM and its brands (Pandora, Stitcher, SXM Media, AdsWizz, Simplecast, and SiriusXM Connected Vehicle Services) are leading a new era of audio entertainment and services by delivering the most compelling subscription and ad-supported audio entertainment experience for listeners -- in the car, at home, and anywhere on the go with connected devices. Our vision is to shape the future of audio, where everyone can be effortlessly connected to the voices, stories and music they love wherever they are.This is the place where a diverse group of emerging talent and legends alike come to share authentic and purposeful songs, stories, sounds and insights through some of the best programming and technology in the world. Our critically-acclaimed, industry-leading audio entertainment encompasses music, sports, comedy, news, talk, live events, and podcasting. No matter their individual role, each of our employees plays a vital part in bringing SiriusXM s vision to life every day.SiriusXMSiriusXM is the leading audio entertainment company in North America, and the premier programmer and platform for subscription and digital advertising-supported audio products. SiriusXM s platforms collectively reach approximately 150 million listeners, the largest digital audio audience across paid and free tiers in North America, and deliver music, sports, talk, news, comedy, entertainment and podcasts. Pandora, a subsidiary of SiriusXM, is the largest ad-supported audio entertainment streaming service in the U.S. SiriusXM's subsidiaries Stitcher, Simplecast and AdsWizz make it a leader in podcast hosting, production, distribution, analytics and monetization. The Company s advertising sales organization, which operates as SXM Media, leverages its scale, cross-platform sales organization and ad tech capabilities to deliver results for audio creators and advertisers. SiriusXM, through Sirius XM Canada Holdings, Inc., also offers satellite radio and audio entertainment in Canada. In addition to its audio entertainment businesses, SiriusXM offers connected vehicle services to automakers.How you ll make an impact:The Security Architect is responsible for the execution of enterprise security strategy and will be a key resource working to steadily improve and maintain the security architecture posture of all SiriusXM brands. The successful candidate will be responsible for ensuring the security of our hybrid cloud infrastructure while focusing on the service delivery and vehicle communication security.What you ll do: Develop/mature the automation of security risk assessments and threat modeling at InfoSec.Conduct risk analysis and assessments for discreet projects and systems.Work as part of a matrixed-security team to provide security guidance for the enterprise environment, with the goals of maturing the audio, streaming, and telematics service delivery security policy, architecture, and technology frameworks.Improve security posture of the enterprise and support a culture of security-awareness. Advise stakeholders and service owners on risk management and how to effectively balance security/business requirements, and provide advice during security design and assessment, communicating mitigation strategies to both technical and non-technical audiences.Updates enterprise security knowledge by tracking and understanding emerging security practices and standards, participating in educational opportunities, reading professional publications, maintaining personal networks, and participating in professional organizations.Enhances department on reputation by accepting ownership for accomplishing new and different requests, exploring opportunities to add value to job accomplishments.Develop and implement reference security architecture for common use cases.Integrate policies with and ensure compliance to enterprise security policies and standards.What you ll need:BS or MS in Cybersecurity, Computer Science, or related discipline.1-3+ years of information security architecture is desired.Strong knowledge in secure cloud architecture including containers, SDN, serverless compute.Knowledge in common security vulnerabilities and their defense.Knowledge of common security standards, benchmarks, policies, and practices.Knowledge of common security tools such as SIEMs, DLP, IDS/IPS, etc.Knowledge of TCP/IP and related data network protocols.Knowledge of cryptography and PKI.Experience with collaborating and ticketing tools such as Jira and Google Workspace.Experience in programming with scripting languages.Ability to work independently and in a team environment.Ability to pay attention to details and be organized.Willingness to take initiative and to follow through on projects.Excellent time management skills, with the ability to prioritize and multitask, and work under shifting deadlines in a fast-paced environment.Must have legal right to work in the U.S.At SiriusXM, we carefully consider a wide range of factors when determining compensation, including your background and experience. These considerations can cause your compensation to vary. We expect the base salary for this position to be in the range of $110,000 to $140,000 and will depend on your skills, qualifications, and experience. Additionally, this role might be eligible for discretionary short-term and long-term incentives. We encourage all interested candidates to apply.Our goal at SiriusXM is to provide and maintain a work environment that fosters mutual respect, professionalism and cooperation. SiriusXM is an equal opportunity employer that does not discriminate on the basis of actual or perceived race, creed, color, religion, national origin, ancestry, alienage or citizenship status, age, disability or handicap, sex, gender identity, marital status, familial status, veteran status, sexual orientation or any other characteristic protected by applicable federal, state or local laws.The requirements and duties described above may be modified or waived by the Company in its sole discretion without notice. R-2022-11-101