Cyber Security Architect

Description

The company is a global live entertainment business with three units: a ticketing unit, a concert promotion unit, and a media and sponsorship unit.

The ticketing unit sells over 620 million tickets a year for about 10,000 clients worldwide.

The concert unit promotes more than 50,000 events a year for nearly 7,000 artists in over 40 countries.

The media and sponsorship unit connects more than 1,200 sponsors with about 145 million fans who attend the company's events each year.

You will report to the Senior Manager of Cyber Security Architecture and join a global, multidisciplinary security team of cyber security professionals.

Responsibilities

• Work with IT, Security Engineering, Security Operations, GRC and other business units so that security settings meet the company's standards, governance requirements and industry practice.
• Secure cloud and on-premises environments across regions and business units, including high-volume consumer platforms, live event infrastructure and enterprise systems.
• Design and review applications and platforms so they are built and configured securely, drawing on deep knowledge of infrastructure, application, cloud and security.
• Evaluate new applications and services with the Third-Party Risk Management team and the business, checking security controls against enterprise requirements.
• Work with IT teams to enforce security standards so that technology solutions can be secure.
• Review AI platforms and Model Context Protocol (MCP) systems and advise on security, integration and governance.
• Advise on how configuration changes affect Security Operations, GRC compliance and Security Engineering workflows and tooling, taking a whole-picture view.
• Assess proposed application and platform changes from business and Security Engineering teams, their effect on security posture and architecture standards, and recommend action.
• Help teams adopt security controls for IaaS, PaaS and SaaS, including reference architectures and guardrails.
• Advise on creating and deploying network security controls such as firewall access control lists (ACLs).
• Track changes in the external threat landscape using threat intelligence, and work with technology teams on suitable defensive controls.
• Help write enterprise security standards based on frameworks such as CIS Critical Security Controls, and work with the business so controls are understood and applied across technologies and use cases.
• Help evaluate security tools against business needs, security requirements and architecture standards.
• Apply security control frameworks such as CIS Critical Security Controls or NIST SP 800-53 in architecture reviews and standards.

Requirements

• Have 6+ years of combined hands-on experience in at least two of these areas: Windows or Linux/Unix server engineering; cloud engineering, with AWS preferred; configuring security tooling such as EDR/XDR, IDS/IPS, SIEM, PAM, CSPM or DLP; security architecture, security engineering or a similar discipline.
• Understand networking concepts including DNS, DHCP, VLANs, CIDR ranges, proxies, firewalls and load balancers.
• Be available for infrequent international and domestic travel.
• Communicate clearly with both technical and non-technical colleagues.
• Desired: hands-on experience with virtualization and containerization technologies such as VMware and Docker.
• Desired: experience writing scripts to automate manual tasks, with Python preferred.
• Desired: working knowledge of software development standards and SDLC concepts.
• Desired: professional security certifications such as CISSP, Security+ or similar.

Conditions

The role works in a large global environment that spans multiple time zones.

Travel is infrequent and may be international or domestic.

Benefits

• Health: medical, vision, dental and mental health cover for you and your family, access to a health care concierge, and flexible spending or health savings accounts (FSA or HSA).
• Time off: generous paid time off, including paid holidays, sick time and personal days, plus free concert tickets.
• Retirement and stock: a 401(k) program with company match and a stock reimbursement program.
• Family: new parent programs including caregiver leave and baby bonuses, plus support for fertility, adoption, foster care or surrogacy.
• Career: skill development through School of Live, tuition reimbursement and student loan repayment.
• Giving back: volunteer time off and a crowdfunding match.