Senior Product Security Engineer , SoundCloud
$140-180k
+ Employee Equity Plan
More information about location
Next-generation music entertainment ecosystem
Open for applications
Next-generation music entertainment ecosystem
501-1000 employees
Open for applications
$140-180k
+ Employee Equity Plan
More information about location
501-1000 employees
Company mission
To empower artists and fans to connect and share through music.
Role
Who you are
- 5+ years of product or application security experience, or other relevant software engineering experience
- Enthusiasm about collaborating with engineering and product teams to proactively address security issues in products
- Experience conducting threat modeling exercises and secure code reviews
- Experience configuring DevSecOps tools (e.g. SAST, SCA, Secret Scanning)
- Experience managing bug bounty programs
- Familiarity with languages such as Javascript, Go, Ruby, Python, or Scala
- Experience working with cloud providers (AWS, GCP) and Developer SaaS solutions (GitHub, Jira)
- Familiarity with IaC tools such as Terraform
- Ability to effectively communicate risk to technical and non-technical audiences
- Experience with data analysis (SQL) in order to determine scope and impact of vulnerabilities
- Knowledge of industry-standard security frameworks and regulations, such as GDPR, CCPA, SOC2, NIS2, and OWASP is a plus
- Experience with vulnerability management is a plus
- Experience threat modelling Generative AI applications & use-cases in the context of the EU AI Act is a plus
What the job involves
- We are looking for a ProdSec engineer to join our Security team!
- As a Product Security Engineer, you will collaborate cross-functionally with engineering teams to identify and address potential vulnerabilities and implement robust security measures in our products and services. You will advocate and shape security best practices across SoundCloud’s Engineering, Product, and Design (“EPD”) organization
- This position has a unique opportunity to play a direct and pivotal role in safeguarding our products against emerging cyber threats to our platform, artists and creators, and listeners and fans
- Conduct code reviews and threat modeling exercises to identify and remediate potential security vulnerabilities
- Drive efforts to automate the security of our Software Development Lifecycle
- Define, implement, and oversee processes and policies in our Vulnerability Management Program
- Triage and drive to remediation submissions from our external bug bounty program
- Participate in our security incident response process
- Make recommendations to product and teams about how to improve the consumer security of our platform
- Identify security anti-patterns in our codebases and architecture, and make recommendations to engineering on how to improve them
- Help guide our Engineering and Product teams around the safe and responsible use of Generative AI in our products and SDLCs
- Promote and implement security best practices through educational initiatives, such as CTFs and technical talks
- Improve internal tooling, processes, and documentation
- Mentor and onboard new team members
Our take
Founded in 2007, SoundCloud recognized the need for an artist-first platform. The company set out with a clear mission: to empower independent artists by providing them with the necessary tools and resources to grow and build their careers.
Today, SoundCloud boasts over 40M artists on its platform, far outpacing Spotify, which has 11M. As a result, SoundCloud is the largest audio discovery platform in a rapidly growing market. According to MIDiA Research, the independent artist market is poised for continued revenue growth in the coming years, further solidifying SoundCloud's place in the industry.
The company plans to scale its audience and expand its services through new offerings, such as the SoundCloud "roster". This tier system is designed to provide artists with significant creative and financial resources, along with market support, rivalling major record labels. While artists retain ownership of their copyrights, they will be represented by SoundCloud, further enhancing the platform's appeal to independent creators.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
3% employee growth in 12 months
Company
Funding (last 2 of 7 rounds)
Feb 2020
$75m
SERIES G
Aug 2017
$170m
SERIES F
Total funding: $469.3m
Company HQ
Mitte, Berlin, BE
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 12 more jobs at SoundCloud