Security Engineer, Spotify
Detection and Response
$132.9-189.9k
Plus equity
More information about location
Commercial music streaming service
Open for applications
Commercial music streaming service
1001+ employees
Open for applications
$132.9-189.9k
Plus equity
More information about location
1001+ employees
Company mission
To unlock the potential of human creativity—by giving a million creative artists the opportunity to live off their art and billions of fans the opportunity to enjoy and be inspired by it
Role
Who you are
- You are curious, collaborative, and comfortable making progress in an ambiguous and rapidly changing environment
- You have 3+ years of hands-on experience in security operations, incident response, threat detection, detection engineering, or closely related work
- You understand how analysts triage and investigate alerts and how detection quality affects their decisions and workload
- You know how to create and tune detections based on attacker behavior, available telemetry, and an expected investigation path
- You are experienced with security platforms such as SIEM, EDR, SOAR, or comparable monitoring and response technologies
- You can write code or use an automation platform to analyze security telemetry, enrich alerts, build investigation workflows, and remove repetitive work. Experience with Python or a similar language is valuable
- You understand modern detection-as-code practices, including GitHub, peer review, CI/CD, testing, and safely managing production detection content
- You have experience working with at least one major cloud platform, such as Google Cloud, AWS, or Azure
- You understand common threats affecting SaaS-oriented corporate and production environments
- You care about clear documentation, inclusive collaboration, and explaining security concepts to people with different backgrounds and levels of expertise
- You are excited to create and critically evaluate cutting-edge AI workflows for detection development, alert triage, security investigations, and response, while applying sound security judgment and appropriate human oversight
What the job involves
- The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers
- Security engineers at Spotify protect our platform, employees, creators, and more than 700 million users. We are looking for an experienced Security Engineer to join the Detection and Response organization and help identify, investigate, and respond to threats across Spotify's environment
- You will work within our detection engineering squad where the team owns alert triage, security investigations, threat hunting, and the detection engineering lifecycle
- You will turn threat intelligence, incident learnings, and analyst feedback into effective detections and investigation workflows
- You will partner closely with the detection infrastructure squad, which builds and operates Detection and Response platforms and telemetry pipelines, and with teams across Spotify to make sure your squad has the signals and capabilities needed to detect and respond to threats at Spotify's scale
- We are a distributed team that values curiosity, sound judgment, clear communication, and continuous learning. We teach and learn from one another, adapt as the threat landscape changes, and focus our effort according to business needs and risk
- Identify detection opportunities, define clear telemetry requirements, and partner with the detection infrastructure squad and data owners to make the signals needed for detection and investigation available
- Develop, test, tune, and maintain detections across endpoint, identity, cloud, SaaS, email, and other security-relevant environments
- Investigate and prioritize alerts, determine their security impact, and participate in incident containment and remediation
- Build repeatable investigation workflows and playbooks for alert triage, evidence collection, decision-making, escalation, containment, and response
- Improve proactive threat-identification and threat-hunting capabilities using internal telemetry and external threat intelligence
- Create cutting-edge AI workflows for Detection and Response that enrich alerts, gather and analyze evidence, guide investigations, and automate repetitive response work while preserving appropriate human judgment and oversight
- Measure detection effectiveness, identify coverage gaps, and tune detections to balance security value, fidelity, and analyst workload
- Use SIEM, EDR, SOAR, and related security platforms to research threats, develop detections, investigate alerts, and validate security outcomes
- Share knowledge, document decisions, and communicate security findings clearly to technical and non-technical audiences
Our take
Spotify was founded in an attempt to combat the rampant music piracy that was causing significant harm to the industry. The company has since taken music streaming mainstream and now has 180m+ paying subscribers across the world.
With features that include a highly accessible interface and a vast catalogue of artists, Spotify's strong brand has been able to maintain growth in spite of fierce competition from deep-pocketed rivals like Amazon and Apple. The company has achieved this by making smart acquisitions to move into other verticals to strengthen its offerings, especially podcasting, by acquiring Gimlet Media, Anchor and Parcast.
Spotify's future plans include rapid growth with a goal to become a one-stop destination for all digital sound, as well as AI and NFT integrations. However, high costs incurred from the acquisition of exclusive podcasts, increasing competitor strength, and weak bottom-line growth mean that the company must find a balance to maintain its position in the sector.
Freddie
Company Specialist at Welcome to the Jungle
Insights
23% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jan 2016
$1bn
CONVERTIBLE
Jun 2015
$526m
SERIES G
Total funding: $2.1bn
Company benefits
- Extensive learning opportunities, through our dedicated team, GreenHouse
- Flexible share incentives letting you choose how you share in our success
- Global parental leave, six months off - fully paid - for all new parents
- All The Feels, our employee assistance program and self-care hub
- Flexible public holidays, swap days off according to your values and beliefs
Company HQ
Norrmalm, Stockholm, Stockholms län
Leadership
Daniel Ek
(CEO & Chairman)Founded Spotify in 2006. Previously worked as an executive at Tradera, an auction company that was sold to eBay and was briefly the CEO of uTorrent.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 50 more jobs at Spotify