Cloud Security Engineer

Requirements

• 3+ years of hands-on technical experience with security engineering and cloud computing.
• Hands-on security experience and expertise with one or more major cloud platforms such as GCP, AWS, or Azure.
• Confident in automating work in languages like Python, Java, or Golang with modern software development practices.
• Comfortable with infrastructure-as-code and declarative configuration management.
• Experience with operating and securing Kubernetes or similar container orchestration platforms.
• Strong foundation in security skills such as cryptography, IAM, threat modeling, and software security.
• Comfortable working with diverse stakeholders and explaining security concepts to non-expert audiences.
• Experience from working in agile environments and easily adapting to change.

What You'll Be Doing

• Champion and contribute to the development and implementation of security best practices, standards, and automated tooling.
• Partner closely with teams to integrate security seamlessly into Spotify’s infrastructure.
• Consult, evangelize, and teach security to groups of varying sizes, disciplines, and experience levels.
• Drive initiatives to improve the security of Spotify’s engineering ecosystem and infrastructure.
• Conduct threat modeling, security reviews, and risk assessments.
• Evaluate, prototype, and integrate security solutions and tools.
• Stay ahead of the evolving security landscape.
• Contribute to security incident response activities.

Nice to Haves

• Experience with applying generative AI tools to security problems and software engineering tasks.
• Experience integrating security tooling into production systems at scale.

Where You'll Be

• This role is based in Stockholm or London.
• We offer you the flexibility to work where you work best, with some in-person meetings while allowing for remote work.