Remote opportunity at
SpotifySecurity Engineer - Detection and Response
Spotify is hiring a Security Engineer for its Detection and Response organization in New York. The Platform division at Spotify builds foundational technology, infrastructure, tooling, and…
Career Tools
About This Role
Spotify is hiring a Security Engineer for its Detection and Response organization in New York. The Platform division at Spotify builds foundational technology, infrastructure, tooling, and frameworks to support rapid expansion and service a global audience of over 700 million users and creators. In this role, you will join the detection engineering squad to safeguard the platform and employees from emerging risks. This position suits an experienced security professional who…
Job Description
Spotify is hiring a Security Engineer for its Detection and Response organization in New York. The Platform division at Spotify builds foundational technology, infrastructure, tooling, and frameworks to support rapid expansion and service a global audience of over 700 million users and creators. In this role, you will join the detection engineering squad to safeguard the platform and employees from emerging risks.
This position suits an experienced security professional who enjoys handling alert triage, security investigations, threat hunting, and the detection lifecycle. You will collaborate closely with the detection infrastructure team and data owners to establish telemetry requirements and build signals for effective threat detection. Responsibilities include designing and maintaining detection mechanisms across cloud, SaaS, endpoint, identity, and email environments, as well as building AI workflows to enrich alerts and automate repetitive incident tasks.
The role is based in New York with remote work flexibility, though occasional in-person meetings may be required. Spotify operates as an equal opportunity employer and is committed to an accessible recruitment process.
Responsibilities
- Identify detection opportunities and establish clear telemetry requirements with data owners and the detection infrastructure squad
- Develop, test, tune, and maintain detection rules across cloud, endpoint, identity, SaaS, and email environments
- Investigate security alerts, determine their impact, and participate in incident containment and remediation
- Build repeatable investigation workflows and playbooks for alert triage, evidence gathering, escalation, and response
- Improve proactive threat hunting capabilities using external intelligence and internal telemetry
- Create AI workflows to enrich alerts, guide investigations, and automate repetitive response work while keeping human oversight
- Measure detection effectiveness and coverage gaps to balance security value against analyst workload
- Utilize security platforms like SIEM, EDR, and SOAR to research threats and validate outcomes
- Document decisions and share security findings clearly with technical and non-technical stakeholders
Requirements
- 3+ years of hands-on experience in threat detection, incident response, security operations, or detection engineering
- Experience creating and tuning detections based on available telemetry, investigation paths, and attacker behavior
- Proficiency with security monitoring tools such as SIEM, EDR, or SOAR
- Ability to write code or use automation platforms to analyze telemetry, enrich alerts, and build workflows
- Familiarity with detection-as-code practices including GitHub, CI/CD, peer review, and production content management
- Experience working with at least one major cloud platform like Google Cloud, AWS, or Azure
Qualifications
- Experience with Python or a similar programming language for security automation and telemetry analysis
Core Skills
Benefits
- Health insurance
- Six-month paid parental leave
- 401(k) retirement plan
- Monthly meal allowance
- 23 paid days off
- Paid flexible holidays
- Paid sick leave
Frequently Asked Questions
What is the employment type for this position?
The posting specifies that this is a full-time position.
Where is this job located and can I work remotely?
This role is based in New York. The position offers the flexibility to work from home, though some in-person meetings may be required.
What is the salary range for the Security Engineer role?
The United States base salary range for this position is $132,948 to $189,927 USD, plus equity.
How many years of experience are required to apply?
Candidates must have three or more years of hands-on experience in security operations, incident response, threat detection, detection engineering, or closely related work.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.