Cloud Security Engineer

Who you are

• You are a seasoned security, systems or software engineer with a passion for cloud security
• Above all you have an insatiable appetite for learning new things and honing your existing skill set
• 3+ years of hands-on technical experience with security engineering and cloud computing
• Hands-on security experience and expertise with one or more major cloud platforms such as GCP, AWS or Azure
• You are confident in automating your work in languages like Python, Java, or Golang with modern software development practices
• You are comfortable with infrastructure-as-code and declarative configuration management
• You have hands-on experience with operating and securing Kubernetes or similar container orchestration platforms
• Strong foundation with security skills such as cryptography, IAM, threat modeling and software security
• You are comfortable working with diverse stakeholders and explaining security concepts to non-expert audiences
• You have experience from working in agile environments and easily adapt to change, enjoy challenges and thrive in ambiguity
• Experience with applying generative AI tools to security problems and software engineering tasks
• Experience integrating security tooling into production systems at scale

What the job involves

• Security engineers at Spotify protect the security of Spotify’s platform and of our 750+ million users
• We are looking for an experienced engineer to join us in securing the most important engineering initiatives at Spotify
• You will be working in the infrastructure security engineering area to secure the foundations of Spotify’s platform
• We’re a distributed team building the architecture and foundations for secure cloud computing and support platform teams in building best-in-class infrastructure on it
• We aim to constantly improve the security posture for our fast-paced and rapidly-changing environment in a manner that will keep up with our scale
• We’re experts in many domains of security, willing to teach and learn from anyone at the company
• In this role you are expected to represent security in various engineering and business contexts so we expect you to be comfortable communicating with diverse audiences both verbally and in writing
• Champion and contribute to the development and implementation of security best practices, standards, and automated tooling to secure Spotify’s use of cloud computing
• Partner closely with teams across the company to integrate security seamlessly into Spotify’s infrastructure, from ideation to deployment and monitoring
• Consult, evangelize, and teach theoretical and practical security to groups of varying sizes, disciplines, and experience levels
• Drive cross-disciplinary initiatives to improve the security of Spotify’s engineering ecosystem and infrastructure
• Conduct threat modeling, security reviews, and risk assessments to make risk-informed security decisions and recommendations
• Evaluate, prototype, and integrate security solutions and tools to secure Spotify’s cloud environment
• Stay ahead of the curve on the rapidly evolving landscape of security threats, academic research, vulnerabilities and mitigation strategies relevant to Spotify's scale and domain
• Contribute to security incident response activities involving Spotify platforms and systems

Benefits

• Extensive learning opportunities, through our dedicated team, GreenHouse
• Flexible share incentives letting you choose how you share in our success
• Global parental leave, six months off - fully paid - for all new parents
• All The Feels, our employee assistance program and self-care hub
• Flexible public holidays, swap days off according to your values and beliefs