Spotify
Security Engineer - Detection and Response
$133K–$190K
New York, NY · Remote · Full-time · Posted Sep 24, 2026
- Experience
- 3+ years.
About the job
Develops and improves security detections and investigation workflows, and helps identify, investigate, and respond to threats across Spotify’s environment.
What you'll do
- Build, test, tune, and maintain detections; investigate alerts and support incident containment and remediation.
- Develop repeatable investigation playbooks and improve threat hunting, telemetry coverage, and detection effectiveness.
- Create and evaluate AI workflows to enrich alerts, support investigations, and automate response tasks with human oversight.
What they ask for
- Hands-on experience in security operations, incident response, threat detection, detection engineering, or closely related work.
- Experience with SIEM, EDR, SOAR, or comparable monitoring and response technologies.
- Ability to write code or use automation for security telemetry and investigation workflows; knowledge of detection-as-code practices.
- Experience with at least one major cloud platform and understanding of common threats to SaaS-oriented corporate and production environments.
Nice to have
- Experience with Python or a similar language.
Pay
$132,948–$189,927 USD (base salary)
Tools
SIEM, EDR, SOAR, Python, GitHub, CI/CD, Google Cloud, AWS
AI focus
Create and critically evaluate AI workflows for detection development, alert triage, security investigations, and response, with appropriate human judgment and oversight.
Model-written summary · the original posting is authoritative