Cloud Security Engineer

• Join Spotify's infrastructure security engineering area to secure the foundations of the platform for 750+ million users. • Build the architecture and foundations for secure cloud computing and support platform teams in building best-in-class infrastructure. • Work in a distributed team that constantly improves the security posture for a fast-paced, rapidly-changing environment at massive scale. • Be based in Stockholm or London with flexibility to work from home.

• Have 3+ years of hands-on technical experience with security engineering and cloud computing. • Have hands-on security experience and expertise with one or more major cloud platforms such as GCP, AWS, or Azure. • Be confident in automating your work in languages like Python, Java, or Golang with modern software development practices. • Be comfortable with infrastructure-as-code and declarative configuration management. • Have hands-on experience with operating and securing Kubernetes or similar container orchestration platforms. • Have a strong foundation in security skills such as cryptography, IAM, threat modelling, and software security. • Be comfortable working with diverse stakeholders and explaining security concepts to non-expert audiences. • Have experience working in agile environments and easily adapt to change, enjoy challenges, and thrive in ambiguity. • Have experience applying generative AI tools to security problems and software engineering tasks. • Have experience integrating security tooling into production systems at scale.

• Have experience conducting threat modelling, security reviews, and risk assessments at scale. • Have experience consulting and teaching security to groups of varying sizes, disciplines, and experience levels. • Have experience contributing to security incident response activities. • Have experience evaluating, prototyping, and integrating security solutions across a cloud environment.

• Champion and contribute to the development and implementation of security best practices, standards, and automated tooling to secure Spotify's use of cloud computing. • Partner closely with teams across the company to integrate security seamlessly into Spotify's infrastructure, from ideation to deployment and monitoring. • Consult, evangelise, and teach theoretical and practical security to groups of varying sizes, disciplines, and experience levels. • Drive cross-disciplinary initiatives to improve the security of Spotify's engineering ecosystem and infrastructure. • Conduct threat modelling, security reviews, and risk assessments to make risk-informed security decisions and recommendations. • Evaluate, prototype, and integrate security solutions and tools to secure Spotify's cloud environment. • Stay ahead of the curve on the rapidly evolving landscape of security threats, academic research, vulnerabilities, and mitigation strategies. • Contribute to security incident response activities involving Spotify platforms and systems.

• Work from Stockholm or London with flexibility to work from home. • Receive extensive learning opportunities through Spotify's dedicated GreenHouse team. • Receive flexible share incentives letting you choose how you share in Spotify's success. • Receive six months of global parental leave for all new parents. • Access All The Feels, the employee assistance programme and self-care hub. • Swap public holidays flexibly according to your values and beliefs.

Spotify is the world's most popular audio streaming subscription service with more than 750 million users. The infrastructure security engineering team builds the architecture and foundations for secure cloud computing, aiming to constantly improve the security posture across Spotify's fast-paced and rapidly-changing environment.