Spotify

Spotify

Spotify is a leading global audio streaming service empowering artists and inspiring fans worldwide with over 70 million tracks. It has 365 million users, including 165 million subscribers, across 178 markets.

Media
Founded 2006

Description

  • Champion and implement security best practices, standards, and automated tooling across Spotify’s infrastructure, platforms, and AI-driven development.
  • Partner with product, platform, and development teams to embed security throughout the software development lifecycle from ideation to deployment and monitoring.
  • Consult, educate, and advocate for practical security approaches across technical and non-technical audiences.
  • Drive cross-disciplinary initiatives that improve the security of Spotify’s engineering ecosystem and products.
  • Conduct threat modeling, security reviews, and risk assessments for generative AI and non-AI systems and platforms.
  • Evaluate, prototype, and integrate security solutions and tools that improve security outcomes and developer experience at scale.
  • Stay current on AI security threats, academic research, vulnerabilities, and mitigation strategies relevant to Spotify’s environment.
  • Contribute to security incident response activities, including detection, response, and remediation improvements.

Requirements

  • 3+ years of hands-on experience in security engineering or a related technical field.
  • Ability to write code to integrate security tools and automate workflows using modern software development practices.
  • Experience in one or more areas such as backend development, AI/ML systems, distributed computing, CI/CD platforms, cloud infrastructure, or developer platforms.
  • Strong foundation in security concepts including cryptography, threat modeling, secure design, and software security.
  • Ability to communicate security concepts clearly to both technical and non-technical stakeholders.
  • Experience working in agile environments and adapting quickly to changing priorities.
  • Ability to read and write code in one or more languages such as Java, Python, Scala, C++, or TypeScript.
  • Experience applying generative AI tools to security and software engineering challenges.
  • Strong understanding of security risks, attack vectors, and vulnerabilities relevant to AI and machine learning systems, and how to mitigate them.
  • Familiarity with modern agentic AI frameworks and emerging AI development patterns.

Benefits

  • Flexible work location with the option to work from home, with some in-person meetings.
  • Role based in London, United Kingdom or Stockholm, Sweden.
  • Inclusive workplace with reasonable accommodations available during the interview and application process.
  • Opportunity to work at a global company with broad impact across music and podcasting.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Application Security Engineer

ClearCapital.com, 1-10 Real Estate

Clear Capital is hiring a Senior Application Security Engineer to secure application services and related dependencies across the software lifecycle, with a strong focus on risk mitigation, secure development, and AI and third-party software security.

AWS C++ Java JavaScript Penetration Testing PHP PowerShell Python Ruby
14 hours, 15 minutes ago

Senior Application Security Engineer

Canary 11-50 Internet Software & Services

Canary Technologies is hiring a Senior Application Security Engineer to embed security into its fully remote engineering organization and help keep its hospitality software platform secure and scalable.

AWS Burp Suite CI/CD DevSecOps Encryption GitHub Actions GitOps Go Helm JavaScript Kubernetes Penetration Testing Python Secrets Management SonarQube Terraform
14 hours, 15 minutes ago

Senior Mobile Security Engineer (Android/iOS)

Coforge 10K-50K IT Services

A mobile security engineer role focused on hardening Android and iOS applications, building reusable protection components, and validating defenses against real-world attacks.

Android iOS Java Kotlin Objective-C Penetration Testing Swift TLS
1 day, 14 hours ago

Lead Application Security Engineer

Coforge 10K-50K IT Services

Application Security role at a banking organization focused on securing new financial features, automating security checks, and guiding development teams on secure design and coding practices.

GitHub Actions GitLab CI Go Java Jenkins Kotlin Microservices Node.js SonarQube Swift
1 day, 14 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers