Senior Application Security Engineer, Authentication and Abuse Prevention

1 Month ago • All levels

Job Summary

Job Description

The Senior Security Engineer will be responsible for designing, implementing, and maintaining account security and improving abuse prevention measures to safeguard SoundCloud users' authenticity, confidentiality, and integrity. Key responsibilities include designing and implementing security best practices for identity and access management and abuse prevention systems, proactively analyzing data for potential threats, developing and executing incident response plans, collaborating with various teams, and contributing to improvements in processes and tooling. The role involves owning security aspects of complex features and improvements.

Must have:

Strong background in software engineering and/or product security experience
Familiarity with security tools like Burp Suite, and web application firewalls
Strong proficiency in Go or Scala
Strong experience with data analysis with SQL/Bigquery
Experience with secure coding practices and threat modeling

Good to have:

Familiarity with Ruby and JavaScript is a plus
Experience working with cloud providers (AWS, GCP) and SaaS solutions (GitHub)
Knowledge of industry-standard security frameworks and regulations, such as GDPR, CCPA, ISO 27001, and OWASP
Strong verbal and written communication skills

Perks:

Extensive relocation support including allowances, one way flights, temporary accommodation
Creativity and Wellness benefit (gym membership, photography course)
Employee Equity Plan
Generous professional development allowance
Flexible vacation and public holiday policy
Free German courses
Various snacks, goodies, and 2 free lunches weekly when at the office

12 skills required

12 skills required for this role

Add these skills to join the top 1% applicants for this job

ruby

javascript

scala

github

burp-suite

aws

sql

incident-response

data-analytics

communication

team-player

saas-business-models

Job Details

SoundCloud empowers artists and fans to connect and share through music. Founded in 2007, SoundCloud is an artist-first platform empowering artists to build and grow their careers by providing them with the most progressive tools, services, and resources. With over 400+ million tracks from 40 million artists, the future of music is SoundCloud.

We are seeking a highly skilled and experienced Senior Security Engineer to join our Authentication and Abuse Prevention group!

As a Senior Security Engineer within the Authentication and Abuse Prevention group, you will be responsible for designing, implementing, and maintaining account security and improving our abuse prevention measures to safeguard SoundCloud users' authenticity, confidentiality, and integrity.

You have proven engineering skills as a Security Engineer and hands-on experience with designing security solutions for complex systems, and you are motivated to work in IAM-related and abuse prevention-related technologies. You’re a team player and proactive, and you have experience collaborating closely with other teams. You enjoy crafting simple solutions to sophisticated engineering problems and can communicate them to product managers. You’re an entrepreneurial thinker but thrive in a tight-knit team. You’re committed to the products you work on.

Key Responsibilities:

Design, develop, and implement security best practices for identity and access management solutions and abuse prevention systems using Go/Scala
Proactively analyze data for possible threats and abuse prevention
Develop and execute incident response plans for account security
Collaborate with Product Management and other stakeholders within Engineering to maintain a high bar for quality in a fast-paced, iterative environment
Collaborate with fraud, abuse, and security teams to strengthen account and app security.
Solve technical problems with a large scope and complexity with a primary focus on Security
You will be part of the team maintaining systems in production, including responding to incidents etc.
Contribute to team and organizational improvements in processes and tooling
Confidently own security aspects of significantly complex features and improvements with minimal guidance and support from other team members. Collaborate with the team on larger projects.

Experience and Background:

Strong background in software engineering and/or application or product security experience
Familiarity with security tools such as Burp Suite, and web application firewalls
Strong proficiency in Go or Scala. Familiarity with Ruby and JavaScript is a plus
Strong experience with data analysis with SQL/Bigquery
Experience with secure coding practices and threat modeling
Experience working with cloud providers (AWS, GCP) and SaaS solutions (GitHub)
Knowledge of industry-standard security frameworks and regulations, such as GDPR, CCPA, ISO 27001, and OWASP
Strong verbal and written communication skills

About us:

We are a multinational company with offices in the US (New York and Los Angeles), Germany (Berlin), and the UK (London)
We provide a flexible work culture that offers the opportunity to collaborate and connect in person at our offices as well as accommodating work from home
We are deeply committed to ensuring diversity, equity and inclusion at all levels of our organization and fostering a community where everyone’s voice, perspective and experience is respected and heard.
We believe a strong team is made by investing in employees through mentorship, workshops and enrichment opportunities

Benefits:

Not located in Berlin? No worries, we offer extensive relocation support including allowances, one way flights, temporary accommodation and, by partnering with Expath, on the ground support on arrival
Interested in a gym membership, photography course or book? We have a Creativity and Wellness benefit!
Employee Equity Plan
Generous professional development allowance
Flexible vacation and public holiday policy where you can take up to 35 days of PTO annually
We offer free German courses at beginning, intermediate and advanced
Various snacks, goodies, and 2 free lunches weekly when at the office

Diversity, Equity and Inclusion at SoundCloud

SoundCloud is for everyone. Diversity and open expression are fundamental to our organization; they help us lead what’s next in music by understanding and empowering our creators and fans, no matter their identity. We acknowledge the challenges in the music industry, and strive to influence an inclusive culture where everyone can contribute respectfully and thrive, especially the historically marginalized communities that many of our creators, fans and SoundClouders identify with. We are dedicated to creating an inclusive environment at SoundCloud for everyone, regardless of gender identity, sexual orientation, race, ethnicity, migration background, national origin, age, disability status, or care-giver status.

At SoundCloud you can find your community or elevate your allyship by joining a Diversity Resource Group. Diversity Resource Groups are employee-organized groups focused on supporting and promoting the interests of a particular underrepresented community in order to build a more inclusive culture at SoundCloud. Anyone can join, whether you share the identity or strive to be an ally.