Senior Enterprise Security Engineer
About the role
The organization operates within the music streaming and artist empowerment industry, addressing the challenge of connecting artists and fans by providing a platform that supports artists in building and growing their careers through advanced tools, services, and resources. With a vast catalog of over 400 million tracks from 40 million artists, the organization facilitates a large-scale music community.
The Senior Enterprise Security Engineer is responsible for securing the infrastructure and cloud environments that support the organization's platform and employees. This role leads technical efforts in incident response, securing AI systems, hardening cloud architecture, and automating threat detection, contributing by protecting the company's technology from security threats and ensuring reliable and safe experiences for creators and fans.
Responsibilities
- Lead security incident response for infrastructure and endpoint anomalies
- Manage and enhance security for workplace, on-premises, and cloud environments (AWS, GCP)
- Administer and harden Google Workspace and Context-Aware Access policies
- Oversee endpoint security tools including SentinelOne EDR, JAMF, and Intune
- Secure AI inference systems and agent tooling
- Drive Third-Party Risk Management program with Legal and Privacy teams
- Operate and refine Google SecOps (Chronicle SIEM) for threat detection
- Manage security awareness and phishing simulation initiatives
- Collaborate with IT and executives to secure key personnel
- Coordinate penetration tests and vulnerability assessments
- Promote security best practices with engineering and product teams
- Identify and implement automation in security operations
- Stay updated on threat intelligence and industry security standards
Requirements
- 6+ years in security engineering or combined software/security role
- Deep knowledge of cyber threat landscape and security trends
- Expertise in Google Workspace administration and security controls
- Experience with SentinelOne or similar EDR platforms
- Proficiency with JAMF Pro and Microsoft Intune
- Familiarity with Google SecOps / Chronicle SIEM
- Experience with Third-Party Risk Management programs
- Strong cloud security skills in AWS and/or GCP
- Knowledge of GitHub security features
- Programming skills in Python, Ruby, or Go for automation
- Experience with Terraform, containers, Kubernetes, CI/CD, and secrets management
- Understanding of web application security and vulnerability assessment
- Experience with Context-Aware Access and Zero Trust architectures preferred
- Familiarity with security awareness platforms like KnowBe4 preferred
- Prior experience securing Enterprise AI platforms advantageous
- Technical degree or equivalent background desirable
Pay
The salary range for this role is $140,000 to $170,000 annually. Final salary determined by experience, skills, internal equity, and location.
Benefits
- Medical, dental, and vision insurance
- 401(k) program
- Paid maternity and paternity leave
- Additional benefits including professional development allowance and flexible PTO policy