Spotify
Security Engineer - Detection and Response
New York, NY · Mid
Sponsorship not specified$133k-$190kDetected 26 days ago
PythonCode ReviewGitAWSGCPCloud PlatformsCI/CDCybersecuritySIEMSOARSOC OperationsDetection EngineeringIncident ResponseResearchCommunicationCollaboration
Stay score
odds of building a lasting career here
64Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70
Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- You will turn threat intelligence, incident learnings, and analyst feedback into effective detections and investigation workflows.
- We teach and learn from one another, adapt as the threat landscape changes, and focus our effort according to business needs and risk.
- There will be some in person meetings, but still allows for flexibility to work from home.
Responsibilities
- Identify detection opportunities, define clear telemetry requirements, and partner with the detection infrastructure squad and data owners to make the signals needed for detection and investigation available.
- Develop, test, tune, and maintain detections across endpoint, identity, cloud, SaaS, email, and other security-relevant environments.
- Build repeatable investigation workflows and playbooks for alert triage, evidence collection, decision-making, escalation, containment, and response.
- Create cutting-edge AI workflows for Detection and Response that enrich alerts, gather and analyze evidence, guide investigations, and automate repetitive response work while preserving appropriate human judgment and oversight.
- Use SIEM, EDR, SOAR, and related security platforms to research threats, develop detections, investigate alerts, and validate security outcomes.
- Share knowledge, document decisions, and communicate security findings clearly to technical and non-technical audiences.
Requirements
- You are curious, collaborative, and comfortable making progress in an ambiguous and rapidly changing environment.
- You have 3+ years of hands-on experience in security operations, incident response, threat detection, detection engineering, or closely related work.
- You are experienced with security platforms such as SIEM, EDR, SOAR, or comparable monitoring and response technologies.
- Experience with Python or a similar language is valuable.
- You have experience working with at least one major cloud platform, such as Google Cloud, AWS, or Azure.
- You care about clear documentation, inclusive collaboration, and explaining security concepts to people with different backgrounds and levels of expertise.
Skills
- Security engineers at Spotify protect our platform, employees, creators, and more than 700 million users.
Compensation
- The United States base range for this position is $132,948-$189,927 USD, plus equity.
Benefits
- Measure detection effectiveness, identify coverage gaps, and tune detections to balance security value, fidelity, and analyst workload.
- The benefits available for this position include health insurance, six-month paid parental leave, 401(k) retirement plan, monthly meal allowance, 23 paid days off, paid flexible holidays, and paid sick leave.
Company info
- Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers.
- We are looking for an experienced Security Engineer to join the Detection and Response organization and help identify, investigate, and respond to threats across Spotify's environment.
- We are a distributed team that values curiosity, sound judgment, clear communication, and continuous learning.
Equal opportunity
- Spotify is an equal opportunity employer.
Apply directly at Spotify →Create a free account for alerts like thisView Spotify immigration profile
This listing is sourced directly from Spotify's careers page and normalized into a canonical job model.