Threat Detection & Response Security Engineer

Spotify Los Angeles; New York (NY); Hybrid; USD 133,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Six-month parental leave

401(k) retirement plan

Monthly meal allowance

23 paid days off

Paid flexible holidays

Paid sick leave

Equity

Job summary

Spotify is seeking an experienced Security Engineer to join our Detection and Response group in New York. You will define telemetry, build detections across endpoints, cloud, and SaaS, and drive incident containment and remediation at scale.

You’ll collaborate with the detection infrastructure squad and data owners, improve threat hunting, and create AI-enabled workflows that aid investigations while preserving human oversight. This is a hybrid role with NYC base.

Qualifications

• 3+ years hands-on security operations, incident response, or detection engineering.
• Experience triaging alerts and understanding detection quality impact.
• Experience with SIEM/EDR/SOAR or comparable monitoring tools.

Responsibilities

• Identify detection opportunities and define telemetry requirements.
• Develop, test, tune, and maintain detections across endpoints, identity, cloud, email.
• Investigate alerts and participate in containment and remediation.
• Build repeatable investigation workflows and playbooks.
• Improve threat hunting using internal telemetry and threat intel.
• Create AI workflows for detection and response while ensuring human oversight.
• Share knowledge and communicate findings to technical and non-technical audiences.

Skills

Security operations

Incident response

Threat detection

Detection engineering

Python

GitHub CI/CD

Tools

SIEM

EDR

SOAR

Job description

Spotify is seeking an experienced Security Engineer to join our Detection and Response group in New York. You will define telemetry, build detections across endpoints, cloud, and SaaS, and drive incident containment and remediation at scale.

You’ll collaborate with the detection infrastructure squad and data owners, improve threat hunting, and create AI-enabled workflows that aid investigations while preserving human oversight. This is a hybrid role with NYC base.