Senior Security Engineer

SoundCloud is a next-generation music entertainment company powered by an ecosystem of artists, fans, and thriving communities. As one of the world’s most influential cultural platforms, SoundCloud holds a singular market position as both a music-streaming service with the largest catalog of music, and an artist services and distribution business to help artists grow long-term, successful careers. 

We are looking for Senior Security Engineers to join our growing technology organization!

As Security engineers at SoundCloud, we secure the infrastructure for products that music listeners and creators love. Our work often involves large-scale distributed systems, parallel computing, and data science. We actively improve our tools and processes to support collaboration and productivity. We cultivate an environment where we can all learn and grow.

Key Responsibilities:

• Responsible for configuring, maintaining, and using Elastic Security for SIEM and endpoint protection
• Security incident response, including identifying and remediating security-related infrastructure incidents and endpoint anomalies
• Responsible for implementing and maintaining the security for internal workplace, on-premises and cloud infrastructure, and customer-facing environments
• Maintain involvement with security vendors, industry peers, news and blogs, and professional associations to understand existing and evolving industry standards, technologies, and threats
• Identify opportunities for conducting proof-of-concepts for new technologies
• Lead collaborative administration for Google Workspace and Identity, containerized application security, cloud security and vulnerability management in AWS and GCP, and IAM pipelines
• Coordinate penetration testing and vulnerability testing of infrastructure and applications
• Promote and implement security best practices in a collaborative manner with engineering teams
• Perform security onboarding training for all employees
• Develop and manage educational and training campaigns for security awareness and policy compliance
• Manage bug bounty program to review reported vulnerabilities, facilitate confirmation and remediation of bugs, and communicate with participants/researchers
• Seek out opportunities to develop and implement automated processes and integrations

Experience and Background:

• Over 6 years of software engineering and/or security experience

• Familiarity with common security libraries, security controls, and common security flaws that apply to web applications

• Experience in designing and implementing security controls within a multi-cloud environment, preferably AWS and GCP

• Experience with Terraform, containers, Kubernetes, CI/CD pipelines, Identity and Access Management (IAM), and secrets management in microservices-based architectures

• Proficient experience in software development such as Python and JavaScript

• Proven experience with Web Application Security Testing, Code Reviews, Vulnerability Assessment

• Excellent troubleshooting and problem-solving skills

• Strong communication and collaboration skills

Nice-to-haves

• Computer science education or equivalent experience

• Experience with implementing and maintaining ELK stacks

• Experience with designing, implementing, and maintaining SIEM systems

• Experience with open source and developer tools

 

The salary range for this role is $130,000 to $150,000 annually. The final salary offered will be determined based on relative experience, skills, internal equity, and location. We also offer a generous total rewards program - read more about additional benefits and perks below!

About Us:

• We are a multinational company with offices in the US (New York and Los Angeles), Germany (Berlin), and the UK (London)

• We provide a flexible work culture that offers the opportunity to collaborate and connect in person at our offices as well as accommodating work from home

• We are deeply committed to ensuring diversity, equity and inclusion at all levels of our organization and fostering a community where everyone’s voice, perspective and experience is respected and heard

• We believe a strong team is made by investing in employees through mentorship, workshops and enrichment opportunities

Benefits:

• Comprehensive health benefits including medical, dental, and vision plans, as well as mental health resources

• Robust 401k program

• Emplo