Senior Application Security Engineer, Authentication and Abuse Prevention

SoundCloud Ltd
London
2 weeks ago
Create job alert

SoundCloud empowers artists and fans to connect and share through music. Founded in 2007, SoundCloud is an artist-first platform empowering artists to build and grow their careers by providing them with the most progressive tools, services, and resources. With over 400+ million tracks from 40 million artists, the future of music is SoundCloud.

We are seeking a highly skilled and experienced Senior Security Engineer to join our Authentication and Abuse Prevention group!

As a Senior Security Engineer within the Authentication and Abuse Prevention group, you will be responsible for designing, implementing, and maintaining account security and improving our abuse prevention measures to safeguard SoundCloud users' authenticity, confidentiality, and integrity.

You have proven engineering skills as a Security Engineer and hands-on experience with designing security solutions for complex systems, and you are motivated to work in IAM-related and abuse prevention-related technologies. You’re a team player and proactive, and you have experience collaborating closely with other teams. You enjoy crafting simple solutions to sophisticated engineering problems and can communicate them to product managers. You’re an entrepreneurial thinker but thrive in a tight-knit team. You’re committed to the products you work on.

Key Responsibilities:

Design, develop, and implement security best practices for identity and access management solutions and abuse prevention systems using Go/Scala Proactively analyze data for possible threats and abuse prevention Develop and execute incident response plans for account security Collaborate with Product Management and other stakeholders within Engineering to maintain a high bar for quality in a fast-paced, iterative environment  Collaborate with fraud, abuse, and security teams to strengthen account and app security. Solve technical problems with a large scope and complexity with a primary focus on Security You will be part of the team maintaining systems in production, including responding to incidents etc. Contribute to team and organizational improvements in processes and tooling  Confidently own security aspects of significantly complex features and improvements with minimal guidance and support from other team members. Collaborate with the team on larger projects. 

Experience and Background:

Strong background in software engineering and/or application or product security experience Familiarity with security tools such as Burp Suite, and web application firewalls Strong proficiency in Go or Scala. Familiarity with Ruby and JavaScript is a plus Strong experience with data analysis with SQL/Bigquery  Experience with secure coding practices and threat modeling Experience working with cloud providers (AWS, GCP) and SaaS solutions (GitHub) Knowledge of industry-standard security frameworks and regulations, such as GDPR, CCPA, ISO 27001, and OWASP Strong verbal and written communication skills

Related Jobs

View all jobs

Senior Application Security Engineer (33957)

VP, Senior Product Security Engineer

Senior Security Engineer, Corporate Services Security, Corporate Services Security

Cyber Security Architect

Senior Cloud Security Architect (UK Nationals Only)

Senior Lead Cybersecurity Architect - Chase UK

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Contract vs Permanent Cybersecurity Jobs: Which Pays Better in 2025?

Cybersecurity has become one of the fastest-growing and most crucial fields in modern business. With high-profile breaches dominating headlines and the ongoing digital transformation exposing organisations to new threats, companies across the UK are competing to attract skilled cybersecurity professionals. Roles range from penetration testers (pen testers) and SOC (Security Operations Centre) analysts to compliance officers, cloud security architects, threat intelligence analysts, and CISOs (Chief Information Security Officers). As demand continues to surge, cybersecurity salaries have climbed accordingly, and businesses have turned to more flexible hiring practices. Alongside permanent employment, many professionals explore short-term day‑rate contracting or fixed-term contracts (FTCs), searching for the ideal balance of pay, job security, and growth opportunities. Which arrangement truly pays better in 2025—and which best aligns with your ambitions? In this article, we dive into the contract vs. permanent debate with a focus on cybersecurity roles. We will examine the current market, the structure of day‑rate vs. FTC vs. permanent positions, the pros and cons of each, and some hypothetical pay comparisons. By the end, you should have a clearer sense of which career path might suit your situation and goals—whether you are a seasoned specialist aiming for top rates, or an up-and-coming analyst seeking a stable environment to develop in.

Cyber Security Jobs for Non‑Technical Professionals: Where Do You Fit In?

Defence Needs More Than Hackers in Hoodies When headlines warn of ransomware crippling hospitals or deepfakes swaying elections, we picture hoodie‑clad hackers and elite penetration testers. Yet the reality of the UK’s cyber security sector is broader—and desperately short of talent. The Department for Science, Innovation & Technology (DSIT) estimates a shortfall of 11,200 cyber security professionals in 2024, while 43 % of advertised roles require governance, risk or communication skills rather than hands‑on technical exploits. Put plainly: if you can guide policy, manage projects, interpret regulations or inspire behaviour change, cyber security wants you. This guide highlights the fastest‑growing non‑technical roles, the transferable skills you already possess, and a concrete 90‑day plan to land a cyber security job—no packet sniffers required.

BAE Systems Cybersecurity Jobs in 2025: Your Complete UK Guide to Protecting Governments, Businesses and Critical Infrastructure

From securing the Royal Navy’s new Dreadnought submarines to foiling multimillion‑pound fraud rings, BAE Systems Digital Intelligence (DI)—formerly Detica—sits at the sharp end of global cyber defence. Head‑quartered in Guildford with hubs in Gloucester, Leeds and London, the 5,500‑strong DI business delivers threat‑intelligence platforms, secure‑by‑design software and 24/7 SOC services to government and commercial clients worldwide. With escalating ransomware, AI‑driven disinformation and complex supply‑chain threats, BAE plans to expand its UK cyber workforce by 20 % in 2025. Whether you’re a graduate passionate about reverse engineering, a DevSecOps engineer who loves IaC, or an incident‑response pro comfortable in high‑side environments, this guide explains how to land a BAE Systems cybersecurity job in 2025.