Security Engineer - Product Security

Security engineers at Spotify protect the security of Spotify’s platform and more than 700 million users worldwide. Our Product Security team partners with engineers across the company to help build secure products and platforms at scale. We support autonomous teams through security expertise, practical guidance, and developer-focused tooling that enables innovation while maintaining a strong security posture.

As a Security Engineer, you'll work at the intersection of software engineering, infrastructure, and security. You'll help secure some of Spotify’s most important engineering initiatives, including emerging AI-powered development workflows and platforms.

You'll collaborate with engineers, product teams, and business stakeholders to identify risks, build scalable security solutions, and continuously improve how security is integrated into Spotify’s engineering ecosystem.

What You'll Do

• Partner with engineering teams to integrate security throughout the software development lifecycle, from design through deployment and monitoring.
• Champion and contribute to security best practices, standards, and automated tooling that support secure development across Spotify’s infrastructure and platforms.
• Conduct threat modeling, security reviews, and risk assessments across both AI-powered and traditional systems.
• Drive initiatives that improve the security posture of Spotify’s products, developer platforms, and infrastructure.
• Consult, educate, and advocate for practical security approaches with audiences ranging from individual engineers to senior stakeholders.
• Evaluate, prototype, and integrate security tools that improve developer experience and security outcomes at scale.
• Stay current with evolving security threats, vulnerabilities, and research related to cloud platforms, software systems, and AI technologies.
• Support security incident response activities and contribute to continuous improvements in detection, response, and remediation capabilities.

Who You Are

• You have 3+ years of hands-on experience in security engineering, software engineering, systems engineering, or a related field.
• You are experienced in writing code and automating workflows using modern software development practices.
• You have expertise in one or more areas such as backend development, AI/ML systems, distributed computing, CI/CD platforms, cloud infrastructure, or developer platforms.
• You have a strong understanding of software security concepts including threat modeling, cryptography, secure design, and vulnerability management.
• You are comfortable communicating technical security concepts to both technical and non-technical audiences.
• You have experience working in agile environments and can adapt quickly to changing priorities and evolving challenges.
• You can read and write code in one or more languages such as Java, Python, Scala, C++, or TypeScript.
• You have experience applying generative AI tools to security or software engineering challenges.
• You understand common attack vectors, security risks, and mitigation strategies relevant to AI and machine learning systems.
• You have experience integrating security tooling into large-scale production environments.
• You are familiar with modern agentic AI frameworks and emerging AI development patterns.
• You care about building secure systems while enabling engineers to move quickly and confidently.
• Where You'll BeThis role is based in either London or Stockholm
• We offer you the flexibility to work where you work best!
• There will be some in person meetings, but still allows for flexibility to work from home.

Spotify is an equal opportunity employer. You are welcome at Spotify for who you are, no matter where you come from, what you look like, or what’s playing in your headphones. Our platform is for everyone, and so is our workplace. The more voices we have represented and amplified in our business, the more we will all thrive, contribute, and be forward-thinking!

So bring us your personal experience, your perspectives, and your background. It’s in our differences that we will find the power to keep revolutionizing the way the world listens.

At Spotify, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. We have ways to request reasonable accommodations during the interview process and help assist in what you need. If you need accommodations at any stage of the application or interview process, please let us know - we’re here to support you in any way we can.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans.

If you would like more information about how your data is processed, please contact us. Find our AI notice here: https://lifeatspotify.com/ai-noticeToday, we are the world’s most popular audio streaming subscription service.