SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 140,000 - 170,000 / annual
SoundCloud is seeking a Senior Enterprise Security Engineer to join its Security team and own the security of infrastructure and cloud environments supporting the platform's 400+ million tracks and 40 million artists.
In this role, you will act as a key technical lead across SoundCloud's modern security stack, driving incident response, securing enterprise AI systems, hardening multi-cloud architecture, and automating threat detection. You will work across endpoint, identity, cloud, and third-party risk management to ensure a secure environment for a fast-scaling platform.
Key Responsibilities:
- Lead security incident response: identifying, investigating, and remediating infrastructure incidents and endpoint anomalies
- Own and evolve security for internal workplace, on-premises, and cloud environments (AWS, GCP)
- Administer and harden Google Workspace and Context-Aware Access policies as a lead administrator
- Manage and optimize the endpoint security stack, including SentinelOne EDR and device management via JAMF (macOS) and Intune (Windows/Linux)
- Manage the security of AI Inference, Agents, and Agentic Tooling
- Drive the Third-Party Risk Management (TPRM) program, working closely with Legal and Privacy to assess vendor security posture
- Operate and tune Google SecOps (Chronicle SIEM) for threat detection, log correlation, and investigation workflows
- Manage security awareness and phishing simulation programs
- Partner with IT team and NYC-based executives to ensure security of key employees
- Coordinate penetration testing and vulnerability assessments across infrastructure and applications
- Promote security best practices through collaborative engagement with engineering and product teams
- Identify and implement automation opportunities across security operations and integrations
- Stay current with threat intelligence, security vendors, and evolving industry standards
SoundCloud offers a flexible hybrid work culture with offices in New York, Los Angeles, Berlin, and London. The company is committed to diversity, equity, and inclusion, and provides comprehensive benefits including health coverage, 401k, equity plans, professional development allowance, up to 35 days PTO annually, and 16 weeks paid parental leave.
Requirements:
- 6+ years of hands-on experience in security engineering or combined software engineering/security role
- Broad understanding of evolving cyber threat landscape, emerging attack vectors, and industry security trends
- Deep proficiency with Google Workspace administration, including security settings, audit logging, and DLP controls
- Practical experience with SentinelOne or equivalent EDR platforms
- Hands-on experience with JAMF Pro (macOS fleet management) and Microsoft Intune (cross-platform MDM)
- Working knowledge of Google SecOps / Chronicle SIEM — building parsers, detection rules, and dashboards
- Experience running or contributing to a Third-Party Risk Management program
- Strong cloud security background in AWS and/or GCP — IAM, security groups, audit trails, and config compliance
- Familiarity with GitHub security features (GitHub Actions, secret scanning, dependency review, branch protections)
- Proficiency in Python, Ruby, or Go for security automation and tooling
- Experience with Terraform, containers, Kubernetes, CI/CD pipelines, and secrets management in microservices architectures
- Solid understanding of web application security, vulnerability assessment, and code review
- Experience implementing Context-Aware Access policies and BeyondCorp / Zero Trust architecture (strong plus)
- Hands-on experience with security awareness and phishing simulation platforms like KnowBe4 (highly preferred)
- Prior experience managing and securing Enterprise AI Platforms such as Claude, OpenAI, and Cursor (distinct advantage)
- Computer Science degree or equivalent demonstrable technical background (welcome but not required)
