Senior Enterprise Security Engineer
SoundCloud · New York
About this role
**SoundCloud — Senior Enterprise Security Engineer** SoundCloud is looking for a **Senior Enterprise Security Engineer** to join our Security team. In this role, you’ll own the security of the infrastructure and cloud environments our employees rely on—spanning **endpoint, identity, cloud, and third-party risk**. You’ll act as a key technical lead across our modern security stack, including **incident response**, **securing enterprise AI systems**, **hardening multi-cloud architecture**, and **automating threat detection**. **Key Responsibilities** - Lead security incident response: identify, investigate, and remediate infrastructure incidents and endpoint anomalies - Own and evolve security for internal workplace, on-premises, and cloud environments (**AWS, GCP**) - Administer and harden **Google Workspace** and **Context-Aware Access** policies - Manage and optimize the endpoint security stack, including **SentinelOne EDR** and device management via **JAMF (macOS)** and **Intune (Windows/Linux)** - Manage security for **AI Inference, Agents, and agentic tooling** - Drive **Third-Party Risk Management (TPRM)** with Legal and Privacy to assess vendor security posture - Operate and tune **Google SecOps (Chronicle SIEM)** for threat detection, log correlation, and investigation workflows - Manage security awareness and phishing simulation programs - Partner with IT and NYC-based executives to secure key employees - Coordinate penetration testing and vulnerability assessments across infrastructure and applications - Promote security best practices with engineering and product teams - Identify and implement automation opportunities across security operations and integrations - Stay current with threat intelligence, security vendors, and evolving industry standards **Experience & Background** - **6+ years** hands-on experience in security engineering (or a combined software engineering/security role) - Strong understanding of the evolving cyber threat landscape and emerging attack vectors - Deep proficiency with **Google Workspace** administration (security settings, audit logging, DLP controls) - Practical experience with **SentinelOne** (or equivalent EDR) - Hands-on experience with **JAMF Pro** (macOS) and **Microsoft Intune** (cross-platform MDM) - Working knowledge of **Google SecOps / Chronicle SIEM** (parsers, detection rules, dashboards) - Experience running or contributing to a **Third-Party Risk Management** program - Strong cloud security background in **AWS and/or GCP** (IAM, security groups, audit trails, config compliance) - Familiarity with **GitHub security** features (Actions, secret scanning, dependency review, branch protections) - Proficiency in **Python, Ruby, or Go** for security automation and tooling - Experience with **Terraform, containers, Kubernetes, CI/CD**, and secrets management in microservices architectures - Solid understanding of **web application security**, vulnerability assessment, and code review - Experience implementing **Context-Aware Access** and **BeyondCorp / Zero Trust** is a plus - Security awareness/phishing simulation experience (e.g., **KnowBe4**) is highly preferred - Prior experience managing and securing **Enterprise AI Platforms** (e.g., Claude, OpenAI, Cursor) is a distinct advantage - Degree in Computer Science (or equivalent technical background) is welcome but not required **Compensation** - Salary range: **$140,000–$170,000 annually** (final offer based on experience, skills, in
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.