Security Engineer, Web Application Security

TKO Group Holdings, Inc. (NYSE: TKO) is a premium sports and entertainment company. TKO owns iconic properties including UFC, the world’s premier mixed martial arts organization; WWE, the global leader in sports entertainment; and PBR, the world’s premier bull riding organization. Together, these properties reach 1 billion households across 210 countries and territories and organize more than 500 live events year-round, attracting more than three million fans. TKO also services and partners with major sports rights holders through IMG, an industry-leading global sports marketing agency; and On Location, a global leader in premium experiential hospitality.

Position Title: Cybersecurity Engineer

Location: Remote or On Premise

Reports To: SVP, Cybersecurity, TKO

Department / Division: IT, Cybersecurity

I. About TKO:

TKO Group Holdings, (TKO) is an exciting new company comprised of the Ultimate Fighting Championship (UFC), Professional Bull Riders (PBR), IMG, On Location Experiences, and World Wresting Entertainment (WWE). TKO is seeking a Cybersecurity Engineer to play a critical role in the safeguarding of the organization’s critical systems and data.

II. Position Summary:

Supports the maturing of the organization’s cybersecurity posture by further establishing and delivering on key strategic initiatives.

Recommends, configures, enhances, and maintains relevant security systems and tools based on areas of responsibilities and current threat landscape.

Works with cross-functional teams to drive broad-reaching technology initiatives related to cybersecurity.

Manages and contains information cybersecurity incidents and events to protect critical assets, intellectual property, related data, and the company’s reputation.

Maintains cybersecurity-focused programs to ensure the organization is prepared to protect, detect, respond, and recover from a cyber-attack.

Promotes best practices, implements, and maintains critical cybersecurity controls, supporting processes and procedures.

Aligns closely with the Cybersecurity Architect and Security Operations functions (internal and/or outsourced)

Liaise with other technical and business teams regarding secure architecture, management, and monitoring events to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.

Works in partnership with the technology departments and provides support for infrastructure/networking, cloud and platform, enterprise applications, web development, content engineering and data technology divisions as it relates to security best practices.

Works collaboratively with the data privacy and compliance team to prioritize risk remediation efforts.

Participates in on-call after-hours support rotation to ensure that critical performance issues are resolved, and security events and incidents are addressed in a timely manner, in accordance with internal SLAs.
Support management of managed security services provider (MSSP) and threat intelligence vendors.

IV. Qualifications:

Education: 4-year degree in computer science or related combined work/education experience.
Experience: Minimum 5 years relevant work experience in the field of cybersecurity.
Certifications: Certified Information Systems Security Professional (CISSP) a plus.

VI. Knowledge, Skills, and Abilities:

Hands on experience in related cybersecurity technologies and tools. Including but not limited to Next Generation Firewalls (NGFW), Web Application Firewalls (WAP), Unified Threat Management (UTM), Security Information and Event Management (SIEM), Network Access Control (NAC), Endpoint Detect and Response (EDR), security appliances, software, and vendor specific utilities.
Experience in security related programs. Including but not limited to vulnerability and patch management, application security, IoT security, and mobile security.
Experience in supporting Microsoft EntraID (Azure AD), Microsoft Active Directory (AD), Windows Server and Linux Server platforms.
Experience in working in an Information Technology organization supporting a corporate environment.
Experience in Identity Access Management (IAM).
Experience in Multi-Factor Authentication (MFA), Single Sign-On (SSO) platforms or other authentication methods.
Experience in or hands on experience with secure configuration management and system hardening.
Experience in cloud security (AWS, Google, or Azure) a plus.
Experience in computer forensics and cyber incident investigations a plus.
Strong knowledge of TCP/IP, DNS, NAT, and the OSI Model.
Knowledge of NIST Controls, the NIST Cyber Security Framework (CSF) and ISO/IEC 27000 series frameworks.
Knowledge of or experience in deployment of the Center of Internet Security (CSC) Critical Security Controls (CSC) top 18.
Ability to analyze complex information and identify key and relevant points, including communicating in a relevant and easy to understand manner.
Strong operational and process background.
Strong verbal and written communication skills.
Strong attention to detail, well-organized, and able to manage time efficiently.
Team player with ability to deal effectively with individuals at all levels.
Ability to maintain constructive and collaborative demeanor in stressful situations, including incident response.
Ability to make timely critical decisions with limited and / or ambiguous information

Per local requirements and in the interest of transparency, the hourly rate shown below reflects the prevalent current hiring range for this position. Hiring pay rates are based on a number of factors, including location and may vary depending on job-related qualifications, knowledge, skills and experience. The company strives to provide locally competitive rewards packages, which include base rate along with, as applicable, short- and long-term incentives, growth and developmental opportunities, and robust benefits, such as health care, retirement, vacation and other paid time off, and additional offerings.

Hiring Rate Minimum:

$142,500 annually(minimum will not fall below the applicable State/local minimum salary thresholds)
Hiring Rate Maximum:
$190,000 annually

TKO is an Equal Opportunity Employer and complies with all applicable federal, state, and local laws regarding non-discrimination in employment. TKO makes employment decisions based on merit and qualifications, without considering an employee’s or applicant’s race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, marital status, veteran status, or any other basis prohibited under federal, state or local laws governing non-discrimination in employment in every location in which the Company has facilities. TKO also provides reasonable accommodations for qualified individuals with disabilities in accordance with the Americans with Disabilities Act (ADA) and applicable state or local laws. For information about Privacy and Information Security for TKO employment candidates, please review our Privacy Policy. For information regarding Terms of Use for this and other TKO websites, please review our Terms of Use.

Originally posted on Himalayas

Job Description

Who We Are:

Position Title: Cybersecurity Engineer

Location: Remote or On Premise

Reports To: SVP, Cybersecurity, TKO

Department / Division: IT, Cybersecurity

I. About TKO:

II. Position Summary:

Supports the maturing of the organization’s cybersecurity posture by further establishing and delivering on key strategic initiatives.

Recommends, configures, enhances, and maintains relevant security systems and tools based on areas of responsibilities and current threat landscape.

Works with cross-functional teams to drive broad-reaching technology initiatives related to cybersecurity.

Manages and contains information cybersecurity incidents and events to protect critical assets, intellectual property, related data, and the company’s reputation.

Maintains cybersecurity-focused programs to ensure the organization is prepared to protect, detect, respond, and recover from a cyber-attack.

Promotes best practices, implements, and maintains critical cybersecurity controls, supporting processes and procedures.

Aligns closely with the Cybersecurity Architect and Security Operations functions (internal and/or outsourced)

Liaise with other technical and business teams regarding secure architecture, management, and monitoring events to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.

Works in partnership with the technology departments and provides support for infrastructure/networking, cloud and platform, enterprise applications, web development, content engineering and data technology divisions as it relates to security best practices.

Works collaboratively with the data privacy and compliance team to prioritize risk remediation efforts.

Participates in on-call after-hours support rotation to ensure that critical performance issues are resolved, and security events and incidents are addressed in a timely manner, in accordance with internal SLAs.
Support management of managed security services provider (MSSP) and threat intelligence vendors.

IV. Qualifications:

Education: 4-year degree in computer science or related combined work/education experience.
Experience: Minimum 5 years relevant work experience in the field of cybersecurity.
Certifications: Certified Information Systems Security Professional (CISSP) a plus.

VI. Knowledge, Skills, and Abilities:

Hands on experience in related cybersecurity technologies and tools. Including but not limited to Next Generation Firewalls (NGFW), Web Application Firewalls (WAP), Unified Threat Management (UTM), Security Information and Event Management (SIEM), Network Access Control (NAC), Endpoint Detect and Response (EDR), security appliances, software, and vendor specific utilities.
Experience in security related programs. Including but not limited to vulnerability and patch management, application security, IoT security, and mobile security.
Experience in supporting Microsoft EntraID (Azure AD), Microsoft Active Directory (AD), Windows Server and Linux Server platforms.
Experience in working in an Information Technology organization supporting a corporate environment.
Experience in Identity Access Management (IAM).
Experience in Multi-Factor Authentication (MFA), Single Sign-On (SSO) platforms or other authentication methods.
Experience in or hands on experience with secure configuration management and system hardening.
Experience in cloud security (AWS, Google, or Azure) a plus.
Experience in computer forensics and cyber incident investigations a plus.
Strong knowledge of TCP/IP, DNS, NAT, and the OSI Model.
Knowledge of NIST Controls, the NIST Cyber Security Framework (CSF) and ISO/IEC 27000 series frameworks.
Knowledge of or experience in deployment of the Center of Internet Security (CSC) Critical Security Controls (CSC) top 18.
Ability to analyze complex information and identify key and relevant points, including communicating in a relevant and easy to understand manner.
Strong operational and process background.
Strong verbal and written communication skills.
Strong attention to detail, well-organized, and able to manage time efficiently.
Team player with ability to deal effectively with individuals at all levels.
Ability to maintain constructive and collaborative demeanor in stressful situations, including incident response.
Ability to make timely critical decisions with limited and / or ambiguous information

Hiring Rate Minimum:

$142,500 annually(minimum will not fall below the applicable State/local minimum salary thresholds)
Hiring Rate Maximum:
$190,000 annually

Originally posted on Himalayas

Job Description

Who We Are:

Position Title: Cybersecurity Engineer

Location: Remote or On Premise

Reports To: SVP, Cybersecurity, TKO

Department / Division: IT, Cybersecurity

I. About TKO:

II. Position Summary:

Supports the maturing of the organization’s cybersecurity posture by further establishing and delivering on key strategic initiatives.

Recommends, configures, enhances, and maintains relevant security systems and tools based on areas of responsibilities and current threat landscape.

Works with cross-functional teams to drive broad-reaching technology initiatives related to cybersecurity.

Manages and contains information cybersecurity incidents and events to protect critical assets, intellectual property, related data, and the company’s reputation.

Maintains cybersecurity-focused programs to ensure the organization is prepared to protect, detect, respond, and recover from a cyber-attack.

Promotes best practices, implements, and maintains critical cybersecurity controls, supporting processes and procedures.

Aligns closely with the Cybersecurity Architect and Security Operations functions (internal and/or outsourced)

Liaise with other technical and business teams regarding secure architecture, management, and monitoring events to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.

Works in partnership with the technology departments and provides support for infrastructure/networking, cloud and platform, enterprise applications, web development, content engineering and data technology divisions as it relates to security best practices.

Works collaboratively with the data privacy and compliance team to prioritize risk remediation efforts.

Participates in on-call after-hours support rotation to ensure that critical performance issues are resolved, and security events and incidents are addressed in a timely manner, in accordance with internal SLAs.
Support management of managed security services provider (MSSP) and threat intelligence vendors.

IV. Qualifications:

Education: 4-year degree in computer science or related combined work/education experience.
Experience: Minimum 5 years relevant work experience in the field of cybersecurity.
Certifications: Certified Information Systems Security Professional (CISSP) a plus.

VI. Knowledge, Skills, and Abilities:

Hands on experience in related cybersecurity technologies and tools. Including but not limited to Next Generation Firewalls (NGFW), Web Application Firewalls (WAP), Unified Threat Management (UTM), Security Information and Event Management (SIEM), Network Access Control (NAC), Endpoint Detect and Response (EDR), security appliances, software, and vendor specific utilities.
Experience in security related programs. Including but not limited to vulnerability and patch management, application security, IoT security, and mobile security.
Experience in supporting Microsoft EntraID (Azure AD), Microsoft Active Directory (AD), Windows Server and Linux Server platforms.
Experience in working in an Information Technology organization supporting a corporate environment.
Experience in Identity Access Management (IAM).
Experience in Multi-Factor Authentication (MFA), Single Sign-On (SSO) platforms or other authentication methods.
Experience in or hands on experience with secure configuration management and system hardening.
Experience in cloud security (AWS, Google, or Azure) a plus.
Experience in computer forensics and cyber incident investigations a plus.
Strong knowledge of TCP/IP, DNS, NAT, and the OSI Model.
Knowledge of NIST Controls, the NIST Cyber Security Framework (CSF) and ISO/IEC 27000 series frameworks.
Knowledge of or experience in deployment of the Center of Internet Security (CSC) Critical Security Controls (CSC) top 18.
Ability to analyze complex information and identify key and relevant points, including communicating in a relevant and easy to understand manner.
Strong operational and process background.
Strong verbal and written communication skills.
Strong attention to detail, well-organized, and able to manage time efficiently.
Team player with ability to deal effectively with individuals at all levels.
Ability to maintain constructive and collaborative demeanor in stressful situations, including incident response.
Ability to make timely critical decisions with limited and / or ambiguous information

Hiring Rate Minimum:

$142,500 annually(minimum will not fall below the applicable State/local minimum salary thresholds)
Hiring Rate Maximum:
$190,000 annually

Originally posted on Himalayas

Job Description

Who We Are:

Position Title: Cybersecurity Engineer

Location: Remote or On Premise

Reports To: SVP, Cybersecurity, TKO

Department / Division: IT, Cybersecurity

I. About TKO:

II. Position Summary:

Supports the maturing of the organization’s cybersecurity posture by further establishing and delivering on key strategic initiatives.

Recommends, configures, enhances, and maintains relevant security systems and tools based on areas of responsibilities and current threat landscape.

Works with cross-functional teams to drive broad-reaching technology initiatives related to cybersecurity.

Manages and contains information cybersecurity incidents and events to protect critical assets, intellectual property, related data, and the company’s reputation.

Maintains cybersecurity-focused programs to ensure the organization is prepared to protect, detect, respond, and recover from a cyber-attack.

Promotes best practices, implements, and maintains critical cybersecurity controls, supporting processes and procedures.

Aligns closely with the Cybersecurity Architect and Security Operations functions (internal and/or outsourced)

Liaise with other technical and business teams regarding secure architecture, management, and monitoring events to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.

Works in partnership with the technology departments and provides support for infrastructure/networking, cloud and platform, enterprise applications, web development, content engineering and data technology divisions as it relates to security best practices.

Works collaboratively with the data privacy and compliance team to prioritize risk remediation efforts.

Participates in on-call after-hours support rotation to ensure that critical performance issues are resolved, and security events and incidents are addressed in a timely manner, in accordance with internal SLAs.
Support management of managed security services provider (MSSP) and threat intelligence vendors.

IV. Qualifications:

Education: 4-year degree in computer science or related combined work/education experience.
Experience: Minimum 5 years relevant work experience in the field of cybersecurity.
Certifications: Certified Information Systems Security Professional (CISSP) a plus.

VI. Knowledge, Skills, and Abilities:

Hands on experience in related cybersecurity technologies and tools. Including but not limited to Next Generation Firewalls (NGFW), Web Application Firewalls (WAP), Unified Threat Management (UTM), Security Information and Event Management (SIEM), Network Access Control (NAC), Endpoint Detect and Response (EDR), security appliances, software, and vendor specific utilities.
Experience in security related programs. Including but not limited to vulnerability and patch management, application security, IoT security, and mobile security.
Experience in supporting Microsoft EntraID (Azure AD), Microsoft Active Directory (AD), Windows Server and Linux Server platforms.
Experience in working in an Information Technology organization supporting a corporate environment.
Experience in Identity Access Management (IAM).
Experience in Multi-Factor Authentication (MFA), Single Sign-On (SSO) platforms or other authentication methods.
Experience in or hands on experience with secure configuration management and system hardening.
Experience in cloud security (AWS, Google, or Azure) a plus.
Experience in computer forensics and cyber incident investigations a plus.
Strong knowledge of TCP/IP, DNS, NAT, and the OSI Model.
Knowledge of NIST Controls, the NIST Cyber Security Framework (CSF) and ISO/IEC 27000 series frameworks.
Knowledge of or experience in deployment of the Center of Internet Security (CSC) Critical Security Controls (CSC) top 18.
Ability to analyze complex information and identify key and relevant points, including communicating in a relevant and easy to understand manner.
Strong operational and process background.
Strong verbal and written communication skills.
Strong attention to detail, well-organized, and able to manage time efficiently.
Team player with ability to deal effectively with individuals at all levels.
Ability to maintain constructive and collaborative demeanor in stressful situations, including incident response.
Ability to make timely critical decisions with limited and / or ambiguous information

Hiring Rate Minimum:

$142,500 annually(minimum will not fall below the applicable State/local minimum salary thresholds)
Hiring Rate Maximum:
$190,000 annually

Originally posted on Himalayas