# Senior Enterprise Security Engineer at SoundCloud

> United States · Senior · Security · open. Source: https://alderhq.app/jobs/greenhouse%3Asoundcloud71%3A8894619002 (read 2026-11-10).

## Facts (observed)

- Company: [SoundCloud](https://alderhq.app/companies/soundcloud)
- Location text: New York; New York
- Where it can be done from (inferred): United States (evidence: "Location: New York; New York")
- Posted: 2026-10-16 (25 days ago)
- First seen by alder: 2026-11-07 · last verified: 2026-11-07
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://job-boards.greenhouse.io/soundcloud71/jobs/8894619002
- Skills listed (inferred): Python, Ruby/Rails, AWS, GCP, Kubernetes, Docker, Terraform, LLMs, Distributed systems

## Pay and sponsorship

- Posted pay: not posted
- Market band for similar posted roles (New York, n 22): p25 $166k, median $186k, p75 $215k

## Description (the employer's text)

SoundCloud empowers artists and fans to connect and share through music. Founded in 2007, SoundCloud is an artist-first platform empowering artists to build and grow their careers by providing them with the most progressive tools, services, and resources. With over 400+ million tracks from 40 million artists, the future of music is SoundCloud.

SoundCloud is looking for a Senior Enterprise Security Engineer to join our Security team. In this role, you will own the security of the infrastructure and cloud environments our employees rely on to build delightful experiences for creators and fans, spanning endpoint, identity, cloud, and third-party risk.

You will act as a key technical lead across our modern security stack: driving incident response, securing enterprise AI systems, hardening multi-cloud architecture, and automating threat detection. If you have a deep passion for security, a builder mindset, and a desire to shape a secure environment for a fast-scaling platform, this role is for you.

Key Responsibilities:

- Lead security incident response: identifying, investigating, and remediating infrastructure incidents and endpoint anomalies
- Own and evolve security for internal workplace, on-premises, and cloud environments (AWS, GCP)
- Administer and harden Google Workspace and Context-Aware Access policies as a lead administrator
- Manage and optimize our endpoint security stack, including SentinelOne EDR and device management via JAMF (macOS) and Intune (Windows/Linux)
- Manage the security of our AI Inference, Agents, and Agentic Tooling
- Drive our Third-Party Risk Management (TPRM) program, working closely with Legal and Privacy to assess vendor security posture
- Operate and tune Google SecOps (Chronicle SIEM) for threat detection, log correlation, and investigation workflows
- Manage security awareness and phishing simulation programs
- Partner with our IT team and NYC-based executives to ensure the security of our key employees.
- Coordinate penetration testing and vulnerability assessments across infrastructure and applications
- Promote security best practices through collaborative engagement with engineering and product teams
- Identify and implement automation opportunities across security operations and integrations
- Stay current with threat intelligence, security vendors, and evolving industry standards
Experience and Background:

- 6+ years of hands-on experience in security engineering or a combined software engineering/security role
- Broad understanding of the evolving cyber threat landscape, emerging attack vectors, and industry security trends
- Deep proficiency with Google Workspace administration, including security settings, audit logging, and DLP controls
- Practical experience with SentinelOne or equivalent EDR platforms
- Hands-on experience with JAMF Pro (macOS fleet management) and Microsoft Intune (cross-platform MDM)
- Working knowledge of Google SecOps / Chronicle SIEM — building parsers, detection rules, and dashboards
- Experience running or contributing to a Third-Party Risk Management program
- Strong cloud security background in AWS and/or GCP — IAM, security groups, audit trails, and config compliance
- Familiarity with GitHub security features (GitHub Actions, secret scanning, dependency review, branch protections)
- Proficiency in either Python, Ruby, or Go for security automation and tooling. Don’t worry, you’ll have an LLM to help with the others!
- Experience with Terraform, containers, Kubernetes, CI/CD pipelines, and secrets management in microservices architectures
- Solid understanding of web application security, vulnerability assessment, and code review
- Experience implementing Context-Aware Access policies and BeyondCorp / Zero Trust architecture is a strong plus
- Hands-on experience with security awareness and phishing simulation platforms like KnowBe4 is highly preferred
- Prior experience managing and securing Enterprise AI Platforms (such as Claude, OpenAI, and Cursor) is a distinct advantage
- A degree in Computer Science or an equivalent demonstrable technical background is welcome, but not required

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/greenhouse%3Asoundcloud71%3A8894619002 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.
