Senior Enterprise Security Engineer

Description

The company is a music platform founded in 2007 that helps artists build careers and reach fans. It hosts 400+ million tracks from 40 million artists.

This is a Senior Enterprise Security Engineer role on the Security team, covering the security of the infrastructure and cloud environments employees use to build products for creators and fans. That spans endpoints, identity, cloud and third-party risk.

You will be a senior technical lead across incident response, enterprise AI systems, multi-cloud architecture and automated threat detection.

The role suits someone who cares deeply about security, likes building things and wants to help shape a secure setup for a platform that is scaling quickly.

The team is small, invests in mentorship, workshops and learning opportunities, and works to keep everyone's voice heard.

Responsibilities

• Own security for internal workplace, on-premises and cloud environments on AWS and GCP.
• Lead incident response, from identifying and investigating infrastructure incidents and endpoint anomalies through to remediation.
• Act as lead administrator for Google Workspace and Context-Aware Access policies, hardening both over time.
• Run the endpoint security stack: SentinelOne EDR, plus device management through JAMF for macOS and Intune for Windows and Linux.
• Secure AI inference, agents and agentic tooling.
• Lead the Third-Party Risk Management program with Legal and Privacy, assessing vendor security posture.
• Operate and tune Google SecOps (Chronicle SIEM) for detection, log correlation and investigations.
• Run security awareness and phishing simulation programs.
• Work with the IT team and NYC-based executives to protect key employees.
• Coordinate penetration tests and vulnerability assessments across infrastructure and applications.
• Encourage security best practices by working alongside engineering and product teams.
• Find and build automation across security operations and integrations.
• Keep up with threat intelligence, security vendors and industry standards.

Requirements

• 6+ years of hands-on security engineering, or a mix of software engineering and security work.
• A good grasp of the threat landscape, new attack methods and security trends.
• Deep Google Workspace administration skills, covering security settings, audit logging and DLP controls.
• Practical use of SentinelOne or a comparable EDR platform.
• Hands-on work with JAMF Pro for macOS fleets and Microsoft Intune across platforms.
• Working knowledge of Google SecOps / Chronicle SIEM, including writing parsers, detection rules and dashboards.
• Experience running or contributing to a Third-Party Risk Management program.
• Strong AWS and/or GCP security skills: IAM, security groups, audit trails and config compliance.
• Familiarity with GitHub security features: GitHub Actions, secret scanning, dependency review and branch protections.
• Proficiency in Python, Ruby or Go for security automation and tooling. An LLM will help with the other languages.
• Experience with Terraform, containers, Kubernetes, CI/CD pipelines and secrets management in microservices.
• Solid grasp of web application security, vulnerability assessment and code review.
• Experience implementing Context-Aware Access policies and BeyondCorp / Zero Trust architecture: a strong plus.
• Hands-on experience with awareness and phishing simulation platforms such as KnowBe4: highly preferred.
• Experience managing and securing enterprise AI platforms such as Claude, OpenAI and Cursor: a distinct advantage.
• A computer science degree or an equivalent demonstrable technical background: welcome, but not required.
• A real interest in exploring new areas of security.

Conditions

Salary is $140,000 to $170,000 per year, set by relative experience, skills, internal equity and location.

Offices in New York, Los Angeles, Berlin and London, with a flexible setup that includes in-person days at the office and working from home.

The company is committed to diversity, equity and inclusion and welcomes applicants from all backgrounds.

Benefits

• Medical, dental and vision plans, plus mental health resources.
• 401k program.
• An employee equity plan.
• A generous professional development allowance.
• A Creativity and Wellness benefit for things like a gym membership, a photography course or a book.
• Flexible vacation and public holiday policy with up to 35 days of PTO a year.
• 16 paid weeks for all parents, regardless of gender, for newborns, adopted children and foster children.
• Snacks and treats, plus two free lunches a week when you are in the office.