Spotify is a digital music service that gives you access to millions of songs. Backed by Accel, Kleiner Perkins and Norwest.
About the role
Identify detection opportunities, define clear telemetry requirements, and partner with the detection infrastructure squad and data owners to make the signals needed for detection and investigation available. Develop, test, tune, and maintain detections across endpoint, identity, cloud, SaaS, email, and other security-relevant environments.
What they're looking for
- You are curious, collaborative, and comfortable making progress in an ambiguous and rapidly changing environment
- You have 3+ years of hands-on experience in security operations, incident response, threat detection, detection engineering, or closely related work
- You understand how analysts triage and investigate alerts and how detection quality affects their decisions and workload
- You know how to create and tune detections based on attacker behavior, available telemetry, and an expected investigation path
- You are experienced with security platforms such as SIEM, EDR, SOAR, or comparable monitoring and response technologies
- You can write code or use an automation platform to analyze security telemetry, enrich alerts, build investigation workflows, and remove repetitive work. Experience with Python or a similar language is valuable
More about this role
The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers.
Security engineers at Spotify protect our platform, employees, creators, and more than 700 million users. We are looking for an experienced Security Engineer to join the Detection and Response organization and help identify, investigate, and respond to threats across Spotify's environment.
You will work within our detection engineering squad where the team owns alert triage, security investigations, threat hunting, and the detection engineering lifecycle. You will turn threat intelligence, incident learnings, and analyst feedback into effective detections and investigation workflows. You will partner closely with the detection infrastructure squad, which builds and operates Detection and Response platforms and telemetry pipelines, and with teams across Spotify to make sure your squad has the signals and capabilities needed to detect and respond to...
Browse similar: Startup jobs · Remote jobs · New York