Cloud Security Engineer

• Join Spotify's infrastructure security engineering team to secure the foundations of the platform and protect 750+ million users. • Build the architecture and foundations for secure cloud computing and support platform teams in building best-in-class infrastructure. • Constantly improve the security posture for a fast-paced, rapidly-changing environment at massive scale. • Represent security in various engineering and business contexts, communicating with diverse audiences both verbally and in writing.

• Have 3+ years of hands-on technical experience with security engineering and cloud computing. • Have hands-on security experience and expertise with one or more major cloud platforms such as GCP, AWS, or Azure. • Be confident in automating work in languages like Python, Java, or Golang with modern software development practices. • Be comfortable with infrastructure-as-code and declarative configuration management. • Have hands-on experience operating and securing Kubernetes or similar container orchestration platforms. • Have a strong foundation in security skills such as cryptography, IAM, threat modelling, and software security. • Be comfortable working with diverse stakeholders and explaining security concepts to non-expert audiences. • Have experience working in agile environments and thrive in ambiguity.

• Have experience applying generative AI tools to security problems and software engineering tasks. • Have experience integrating security tooling into production systems at scale. • Have experience with security incident response activities. • Have experience conducting threat modelling and security reviews for cloud-native architectures. • Have experience with multiple major cloud platforms (GCP, AWS, Azure).

• Champion and contribute to the development and implementation of security best practices, standards, and automated tooling to secure Spotify's cloud computing. • Partner closely with teams across the company to integrate security seamlessly into infrastructure, from ideation to deployment and monitoring. • Consult, evangelise, and teach theoretical and practical security to groups of varying sizes, disciplines, and experience levels. • Drive cross-disciplinary initiatives to improve the security of Spotify's engineering ecosystem and infrastructure. • Conduct threat modelling, security reviews, and risk assessments to make risk-informed security decisions. • Evaluate, prototype, and integrate security solutions and tools to secure Spotify's cloud environment. • Stay ahead of the evolving landscape of security threats, academic research, vulnerabilities, and mitigation strategies. • Contribute to security incident response activities involving Spotify platforms and systems.

• Access extensive learning opportunities through Spotify's dedicated team, GreenHouse. • Receive flexible share incentives letting you choose how you share in Spotify's success. • Take six months of global parental leave for all new parents. • Use All The Feels, the employee assistance programme and self-care hub. • Swap public holidays flexibly according to your values and beliefs.

Spotify's security engineers protect the platform and its 750+ million users. The infrastructure security engineering team is a distributed group building the architecture and foundations for secure cloud computing, aiming to constantly improve the security posture at scale. Spotify is an equal opportunity employer committed to inclusivity and accessibility.