Information Security Specialist

Information Security Specialist | Muse Group Products About Careers Newsroom Ab o ut C a reer s Ne w sr o om Ultimate Guitar MuseScore Audacity Hal Leonard Audio.com MuseHub MuseScore Studio Tonebridge Staffpad Ultimate Guitar MuseScore Audacity Hal Leonard Audio.com MuseHub MuseScore Studio Tonebridge Staffpad Back to jobs Apply Information Security Specialist Sofia, Bulgaria IT Operations We are looking for an Information Security Specialist to strengthen our approach to cyber and business security. We need an expert who can embed security by default into our IT services, working closely with our IT Operations and Application Management teams. We are actively integrating AI automation into relevant areas of the business and expect candidates with mindset focused on improving efficiency and deliver a better user experience. Work format is hybrid: 3 days on-site, 2 days remote. Key responsibilities Required experience More than 6 years of hands-on experience in information security or IT infrastructure, with a strong technical background — this is what allows the Specialist to review configurations and logs credibly, even though the role itself is not hands-on. Solid understanding of web and mobile application vulnerabilities and secure coding practices (e.g., OWASP Top 10), Ability to identify, explain, and mitigate risks based on the OWASP framework, familiarity with OWASP ASVS (Application Security Verification Standard) for security requirements and testing. Practical knowledge of ISO 27001 and the CIS Critical Security Controls (CIS18) or similar frameworks; experience running or supporting internal or external security audits. Working knowledge of SIEM concepts and tools (e.g., Graylog, Splunk, Elastic, Microsoft Sentinel), secure SDLC / DevSecOps practices, vulnerability management, EDR, and identity and access management. Understanding of Zero Trust architecture principles and how to sequence their adoption. Strong written English and the ability to produce clear, business-facing documentation and recommendations. Beneficial: Experience in multi-product SaaS or consumer software company. Prior exposure to GDPR or data-privacy work is an advantage. Familiarity with CrowdStrike Falcon, Invicti, or comparable EDR / vulnerability-scanning tools. Relevant certifications (e.g., CompTIA Security+, CSSLP, CISM, ISO 27001 Lead Auditor/Implementer, CISA or analogs). Benefits Muse Group empowers music makers We create the worldʼs most popular apps for playing, recording and composing music. Through our innovative learning tools, expansive music catalogs and free open-source software, we make it easier for millions — from beginners to experienced musicians — to be creative every day. Our talented team of music lovers collaborates all over the globe, from Limassol to Seoul and Boston to Berlin. We’re an ambitious company with the drive and culture of a startup — with many more exciting Muse Group developments to come. Hal Leonard, which joined Muse Group in 2023, is the world leader in sheet music publishing and music education. The company has a storied history of providing music learners with the very best methods and arrangements of popular music for over 70 years. Hal Leonard is also a major distributor of popular brands of instruments, gear, and software to the music trade worldwide. Apply for this job Email us Careers Partnerships Press Back to top Ultimate Guitar MuseScore Audacity Hal Leonard Audio.com Musehub MuseScore Studio Facebook Instagram Linkedin © 1998 — 2025 Download Press Kit Privacy Policy Terms of Service Click to copy email