Enterprise Security Lead: Cloud, AI & Zero Trust

Musiio; New York (NY); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401k program

Employee Equity Plan

Professional development allowance

Creativity and Wellness benefit

35 days PTO

16 weeks parental leave

Free lunches

Job summary

SoundCloud seeks a Senior Enterprise Security Engineer to own security of our infrastructure and cloud environments across AWS, GCP, and on‑premises. You will lead incident response, threat detection, and risk management, driving security for employees, AI systems, and vendor security posture.

You will partner with IT and executives in NYC to enforce zero-trust principles, automate workflows, and harden our security stack including Google Workspace and Chronicle SIEM.

Qualifications

• 6+ years of hands-on experience in security engineering or a combined software engineering/security role.
• Broad understanding of the evolving cyber threat landscape and industry trends.
• Practical experience with Google Workspace security settings, audit logging, and DLP controls.
• Experience with SentinelOne or equivalent EDR platforms.
• Working knowledge of Google SecOps / Chronicle SIEM.
• Experience with AWS and/or GCP—IAM, security groups, audit trails, config compliance.
• Familiarity with GitHub security features and security tooling.
• Proficiency in Python, Ruby, or Go for security automation.
• Experience with Terraform, containers, Kubernetes, CI/CD pipelines and secrets management.
• Solid understanding of web application security, vulnerability assessment, and code review.
• Context-Aware Access / BeyondCorp is a plus.
• KnowBe4 or security awareness tools is preferred.
• Enterprise AI platforms experience is a plus.

Responsibilities

• Lead security incident response: identifying, investigating, and remediating incidents.
• Own and evolve security for internal workplace, on-premises, and cloud environments (AWS, GCP).
• Administer and harden Google Workspace and Context-Aware Access policies as lead administrator.
• Manage and optimize endpoint security stack (SentinelOne, JAMF, Intune).
• Secure AI Inference, Agents, and Tooling.
• Drive Third-Party Risk Management with Legal/Privacy.
• Operate and tune Google SecOps Chronicle SIEM for detection and investigations.
• Manage security awareness and phishing simulations.
• Coordinate with IT and NYC executives to secure key employees.
• Coordinate penetration testing and vulnerability assessments.
• Promote security best practices with engineering/product teams.
• Identify automation opportunities across security operations.

Skills

Security incident response

Cloud security

Google Workspace security

EDR (SentinelOne)

JAMF Pro

Intune

Google SecOps Chronicle SIEM

Third-Party Risk Management

Python/Ruby/Go

Terraform/Kubernetes

Education

Computer Science degree or equivalent

Tools

SentinelOne EDR

JAMF Pro

Intune

Google Workspace

Job description

SoundCloud seeks a Senior Enterprise Security Engineer to own security of our infrastructure and cloud environments across AWS, GCP, and on‑premises. You will lead incident response, threat detection, and risk management, driving security for employees, AI systems, and vendor security posture.

You will partner with IT and executives in NYC to enforce zero-trust principles, automate workflows, and harden our security stack including Google Workspace and Chronicle SIEM.