Skip to Content
Remote

Security Engineer - Detection and Response

Job Overview

You will work within our detection engineering squad where the team owns alert triage, security investigations, threat hunting, and the detection engineering lifecycle. We are looking for an experienced Security Engineer to join the Detection and Response organization and help identify, investigate, and respond to threats across Spotify's environment.

Key points

  1. Identify detection opportunities, define clear telemetry requirements, and partner with the detection infrastructure squad and data owners to make the signals needed for detection…

  2. Develop, test, tune, and maintain detections across endpoint, identity, cloud, SaaS, email, and other security-relevant environments.

  3. Investigate and prioritize alerts, determine their security impact, and participate in incident containment and remediation.

  4. Build repeatable investigation workflows and playbooks for alert triage, evidence collection, decision-making, escalation, containment, and response.

  5. You are curious, collaborative, and comfortable making progress in an ambiguous and rapidly changing environment.

  6. You understand how analysts triage and investigate alerts and how detection quality affects their decisions and workload.

  7. You know how to create and tune detections based on attacker behavior, available telemetry, and an expected investigation path.

  8. You are experienced with security platforms such as SIEM, EDR, SOAR, or comparable monitoring and response technologies.

Skills

InterviewingPythonAWSAzureGoogle CloudCI/CDGitRecruiting

Experience: Mid-level · 3+ years · Job type: Full-time