Spotify
Security Engineer - Detection and Response
About this role
Spotify is seeking an experienced Security Engineer to join the Detection and Response team in New York. You'll develop and maintain security detections across multiple platforms, investigate threats, build investigation workflows, and create AI-enhanced detection capabilities to protect Spotify's platform and 700+ million users.
What you'll do
- Identify detection opportunities and define telemetry requirements across endpoint, identity, cloud, and SaaS environments
- Develop, test, tune, and maintain detections using SIEM, EDR, SOAR, and related security platforms
- Investigate and prioritize alerts, determine security impact, and participate in incident response and remediation
- Build repeatable investigation workflows, playbooks, and alert triage processes with appropriate escalation paths
- Create AI workflows that enrich alerts, automate evidence analysis, and guide investigations while maintaining human oversight
- Measure detection effectiveness, identify coverage gaps, and optimize detection-to-analyst workload balance
What they're looking for
- Security operations and incident response (3+ years)
- Detection engineering and threat detection
- SIEM, EDR, SOAR platform expertise
- Python or similar programming/automation language
- Detection-as-code practices (GitHub, CI/CD, peer review)
- Cloud platform experience (GCP, AWS, or Azure)
- Threat intelligence and threat hunting
- Alert triage and investigation methodology
Benefits
- Health insurance
- Six-month paid parental leave
- 401(k) retirement plan
- Monthly meal allowance
- 23 paid days off plus paid flexible holidays and sick leave
- Flexible work arrangement with in-person meetings as needed
Opens the application — the Jobs AI extension fills it for you. Set up autofill
Opens the official application on the employer’s site. No login required.
Spotify
Spotify builds music and podcast streaming technology alongside advertising and creator promotion systems at scale. The company is hiring Full Stack Engineers, Machine Learning Engineers, Frontend Engineers, and Backend Engineers to work on its Ads API, music promotion ML systems, podcast infrastructure, and rights management platforms.
- Website
- spotify.com
Likely interview questions
- Walk us through your experience developing and tuning detections—how do you balance security value, fidelity, and analyst workload?
- Describe a time you investigated an alert and discovered it was a false positive. How did you use that learning to improve future detections?