Senior Enterprise Security Engineer
About The Position
SoundCloud is seeking a Senior Enterprise Security Engineer to join its Security team. The role owns security for the infrastructure and cloud environments employees use, spanning endpoint, identity, cloud, and third-party risk. The engineer will serve as a technical lead across the security stack, driving incident response, securing enterprise AI systems, hardening multi-cloud architecture, and automating threat detection. The position works across internal workplace, on-premises, AWS, and GCP environments, partnering with IT, Legal, Privacy, engineering, product teams, and NYC-based executives. It also involves improving security operations, coordinating security assessments, and promoting security best practices. SoundCloud describes its work culture as flexible, with opportunities to collaborate in its offices and work from home.
Requirements
- At least 6 years of hands-on experience in security engineering or a combined software engineering/security role.
- Broad understanding of the evolving cyber threat landscape, emerging attack vectors, and industry security trends.
- Deep proficiency with Google Workspace administration, including security settings, audit logging, and DLP controls.
- Practical experience with SentinelOne or an equivalent EDR platform.
- Hands-on experience with JAMF Pro for macOS fleet management and Microsoft Intune for cross-platform MDM.
- Working knowledge of Google SecOps / Chronicle SIEM, including building parsers, detection rules, and dashboards.
- Experience running or contributing to a Third-Party Risk Management program.
- Strong cloud security background in AWS and/or GCP, including IAM, security groups, audit trails, and configuration compliance.
- Familiarity with GitHub security features, including GitHub Actions, secret scanning, dependency review, and branch protections.
- Proficiency in at least one of Python, Ruby, or Go for security automation and tooling.
- Experience with Terraform, containers, Kubernetes, CI/CD pipelines, and secrets management in microservices architectures.
- Solid understanding of web application security, vulnerability assessment, and code review.
- Passion for exploring new areas of security.
Nice To Haves
- Experience implementing Context-Aware Access policies and BeyondCorp / Zero Trust architecture.
- Hands-on experience with security awareness and phishing simulation platforms such as KnowBe4.
- Prior experience managing and securing enterprise AI platforms such as Claude, OpenAI, and Cursor.
- A degree in Computer Science or an equivalent demonstrable technical background is welcome but not required.
Responsibilities
- Lead security incident response by identifying, investigating, and remediating infrastructure incidents and endpoint anomalies.
- Own and evolve security for internal workplace, on-premises, and cloud environments, including AWS and GCP.
- Administer and harden Google Workspace and Context-Aware Access policies.
- Manage and optimize endpoint security, including SentinelOne EDR and device management through JAMF for macOS and Intune for Windows/Linux.
- Manage the security of AI inference, agents, and agentic tooling.
- Drive the Third-Party Risk Management program in collaboration with Legal and Privacy to assess vendor security posture.
- Operate and tune Google SecOps (Chronicle SIEM) for threat detection, log correlation, and investigation workflows.
- Manage security awareness and phishing simulation programs.
- Partner with the IT team and NYC-based executives to ensure the security of key employees.
- Coordinate penetration testing and vulnerability assessments across infrastructure and applications.
- Promote security best practices through collaboration with engineering and product teams.
- Identify and implement automation opportunities across security operations and integrations.
- Stay current with threat intelligence, security vendors, and evolving industry standards.
Benefits
- Comprehensive health benefits, including medical, dental, and vision plans, plus mental health resources.
- Robust 401(k) program.
- Employee Equity Plan.
- Professional development allowance.
- Creativity and Wellness benefit, which can be used for items or activities such as a gym membership, photography course, or books.
- Flexible vacation and public holiday policy, with up to 35 days of PTO annually.
- 16 paid weeks for all parents, regardless of gender, to welcome newborn, adopted, or foster children.
- Snacks and goodies, plus two free lunches weekly when working at the office.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
