Senior Enterprise Security Engineer

Musiio; New York (NY); Hybrid; USD 140,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401k program

Employee Equity Plan

Professional development allowance

Creativity and Wellness benefit

35 days PTO

16 weeks parental leave

Free lunches

Job summary

SoundCloud seeks a Senior Enterprise Security Engineer to own security of our infrastructure and cloud environments across AWS, GCP, and on‑premises. You will lead incident response, threat detection, and risk management, driving security for employees, AI systems, and vendor security posture.

You will partner with IT and executives in NYC to enforce zero-trust principles, automate workflows, and harden our security stack including Google Workspace and Chronicle SIEM.

Qualifications

• 6+ years of hands-on experience in security engineering or a combined software engineering/security role.
• Broad understanding of the evolving cyber threat landscape and industry trends.
• Practical experience with Google Workspace security settings, audit logging, and DLP controls.
• Experience with SentinelOne or equivalent EDR platforms.
• Working knowledge of Google SecOps / Chronicle SIEM.
• Experience with AWS and/or GCP—IAM, security groups, audit trails, config compliance.
• Familiarity with GitHub security features and security tooling.
• Proficiency in Python, Ruby, or Go for security automation.
• Experience with Terraform, containers, Kubernetes, CI/CD pipelines and secrets management.
• Solid understanding of web application security, vulnerability assessment, and code review.
• Context-Aware Access / BeyondCorp is a plus.
• KnowBe4 or security awareness tools is preferred.
• Enterprise AI platforms experience is a plus.

Responsibilities

• Lead security incident response: identifying, investigating, and remediating incidents.
• Own and evolve security for internal workplace, on-premises, and cloud environments (AWS, GCP).
• Administer and harden Google Workspace and Context-Aware Access policies as lead administrator.
• Manage and optimize endpoint security stack (SentinelOne, JAMF, Intune).
• Secure AI Inference, Agents, and Tooling.
• Drive Third-Party Risk Management with Legal/Privacy.
• Operate and tune Google SecOps Chronicle SIEM for detection and investigations.
• Manage security awareness and phishing simulations.
• Coordinate with IT and NYC executives to secure key employees.
• Coordinate penetration testing and vulnerability assessments.
• Promote security best practices with engineering/product teams.
• Identify automation opportunities across security operations.

Skills

Security incident response

Cloud security

Google Workspace security

EDR (SentinelOne)

JAMF Pro

Intune

Google SecOps Chronicle SIEM

Third-Party Risk Management

Python/Ruby/Go

Terraform/Kubernetes

Education

Computer Science degree or equivalent

Tools

SentinelOne EDR

JAMF Pro

Intune

Google Workspace

Job description

SoundCloud empowers artists and fans to connect and share through music. Founded in 2007, SoundCloud is an artist-first platform empowering artists to build and grow their careers by providing them with the most progressive tools, services, and resources. With over 400+ million tracks from 40 million artists, the future of music is SoundCloud.

SoundCloud is looking for a Senior Enterprise Security Engineer to join our Security team. In this role, you will own the security of the infrastructure and cloud environments our employees rely on to build delightful experiences for creators and fans, spanning endpoint, identity, cloud, and third-party risk.

You will act as a key technical lead across our modern security stack: driving incident response, securing enterprise AI systems, hardening multi-cloud architecture, and automating threat detection. If you have a deep passion for security, a builder mindset, and a desire to shape a secure environment for a fast-scaling platform, this role is for you.

Key Responsibilities:

• Lead security incident response: identifying, investigating, and remediating infrastructure incidents and endpoint anomalies
• Own and evolve security for internal workplace, on-premises, and cloud environments (AWS, GCP)
• Administer and harden Google Workspace and Context-Aware Access policies as a lead administrator
• Manage and optimize our endpoint security stack, including SentinelOne EDR and device management via JAMF (macOS) and Intune (Windows/Linux)
• Manage the security of our AI Inference, Agents, and Agentic Tooling
• Drive our Third-Party Risk Management (TPRM) program, working closely with Legal and Privacy to assess vendor security posture
• Operate and tune Google SecOps (Chronicle SIEM) for threat detection, log correlation, and investigation workflows
• Manage security awareness and phishing simulation programs
• Partner with our IT team and NYC-based executives to ensure the security of our key employees.
• Coordinate penetration testing and vulnerability assessments across infrastructure and applications
• Promote security best practices through collaborative engagement with engineering and product teams
• Identify and implement automation opportunities across security operations and integrations
• Stay current with threat intelligence, security vendors, and evolving industry standards

Experience and Background:

• 6+ years of hands-on experience in security engineering or a combined software engineering/security role
• Broad understanding of the evolving cyber threat landscape, emerging attack vectors, and industry security trends
• Deep proficiency with Google Workspace administration, including security settings, audit logging, and DLP controls
• Practical experience with SentinelOne or equivalent EDR platforms
• Hands-on experience with JAMF Pro (macOS fleet management) and Microsoft Intune (cross-platform MDM)
• Working knowledge of Google SecOps / Chronicle SIEM — building parsers, detection rules, and dashboards
• Experience running or contributing to a Third-Party Risk Management program
• Strong cloud security background in AWS and/or GCP — IAM, security groups, audit trails, and config compliance
• Familiarity with GitHub security features (GitHub Actions, secret scanning, dependency review, branch protections)
• Proficiency in either Python, Ruby, or Go for security automation and tooling. Don’t worry, you’ll have an LLM to help with the others!
• Experience with Terraform, containers, Kubernetes, CI/CD pipelines, and secrets management in microservices architectures
• Solid understanding of web application security, vulnerability assessment, and code review
• Experience implementing Context-Aware Access policies and BeyondCorp / Zero Trust architecture is a strong plus
• Hands-on experience with security awareness and phishing simulation platforms like KnowBe4 is highly preferred
• Prior experience managing and securing Enterprise AI Platforms (such as Claude, OpenAI, and Cursor) is a distinct advantage
• A degree in Computer Science or an equivalent demonstrable technical background is welcome, but not required
• Passion for exploring new areas of security; security is in your DNA

The salary range for this role is $140,000- $170,000 annually. The final salary offered will be determined based on relative experience, skills, internal equity, and location. We also offer a generous total rewards program - read more about additional benefits and perks below!

About us:

• We are a multinational company with offices in the US (New York and Los Angeles), Germany (Berlin), and the UK (London)
• We provide a flexible work culture that offers the opportunity to collaborate and connect in person at our offices as well as accommodating work from home
• We are deeply committed to ensuring diversity, equity and inclusion at all levels of our organization and fostering a community where everyone’s voice, perspective and experience is respected and heard
• We believe a strong team is made by investing in employees through mentorship, workshops and enrichment opportunities

Benefits:

• Comprehensive health benefits including medical, dental, and vision plans, as well as mental health resources
• Robust 401k program
• Employee Equity Plan
• Generous professional development allowance
• Interested in a gym membership, photography course or book? We have a Creativity and Wellness benefit!
• Flexible vacation and public holiday policy where you can take up to 35 days of PTO annually
• 16 paid weeks for all parents (birthing and non-birthing), regardless of gender, to welcome newborns, adopted and foster children
• Various snacks, goodies, and 2 free lunches weekly when at the office

Diversity, Equity and Inclusion at SoundCloud

SoundCloud is for everyone. Diversity and open expression are fundamental to our organization; they help us lead what’s next in music by understanding and empowering our creators and fans, no matter their identity. We acknowledge the challenges in the music industry, and strive to influence an inclusive culture where everyone can contribute respectfully and thrive, especially the historically marginalized communities that many of our creators, fans and SoundClouders identify with. We are dedicated to creating an inclusive environment at SoundCloud for everyone, regardless of gender identity, sexual orientation, race, ethnicity, migration background, national origin, age, disability status, or care-giver status.

At SoundCloud you can find your community or elevate your allyship by joining a Diversity Resource Group. Diversity Resource Groups are employee-organized groups focused on supporting and promoting the interests of a particular underrepresented community in order to build a more inclusive culture at SoundCloud. Anyone can join, whether you share the identity or strive to be an ally.