Security Engineer - Detection and Response
Primary stack
Job description
About the Position
Security Engineer - Detection and Response
New York, NY
Engineering – Platform
Permanent
Remote
Apply for this job
Responsibilities
- Identify detection opportunities, define clear telemetry requirements, and partner with the detection infrastructure squad and data owners to make the signals needed for detection and investigation available.
- Develop, test, tune, and maintain detections across endpoint, identity, cloud, SaaS, email, and other security-relevant environments.
- Investigate and prioritize alerts, determine their security impact, and participate in incident containment and remediation.
- Build repeatable investigation workflows and playbooks for alert triage, evidence collection, decision-making, escalation, containment, and response.
- Improve proactive threat-identification and threat-hunting capabilities using internal telemetry and external threat intelligence.
- Create cutting-edge AI workflows for Detection and Response that enrich alerts, gather and analyze evidence, guide investigations, and automate repetitive response work while preserving appropriate human judgment and oversight.
- Measure detection effectiveness, identify coverage gaps, and tune detections to balance security value, fidelity, and analyst workload.
- Use SIEM, EDR, SOAR, and related security platforms to research threats, develop detections, investigate alerts, and validate security outcomes.
- Share knowledge, document decisions, and communicate security findings clearly to technical and non-technical audiences.
Requirements
- Curious, collaborative, and comfortable making progress in an ambiguous and rapidly changing environment.
- 3+ years of hands-on experience in security operations, incident response, threat detection, detection engineering, or closely related work.
- Understanding of how analysts triage and investigate alerts and how detection quality affects their decisions and workload.
- Experience with creating and tuning detections based on attacker behavior, available telemetry, and an expected investigation path.
- Experience with security platforms such as SIEM, EDR, SOAR, or comparable monitoring and response technologies.
- Ability to write code or use an automation platform to analyze security telemetry, enrich alerts, build investigation workflows, and remove repetitive work. Experience with Python or a similar language is valuable.
- Understanding of modern detection-as-code practices, including GitHub, peer review, CI/CD, testing, and safely managing production detection content.
- Experience working with at least one major cloud platform, such as Google Cloud, AWS, or Azure.
- Understanding of common threats affecting SaaS-oriented corporate and production environments.
- Commitment to clear documentation, inclusive collaboration, and explaining security concepts to people with different backgrounds and levels of expertise.
- Excitement to create and critically evaluate cutting-edge AI workflows for detection development, alert triage, security investigations, and response, while applying sound security judgment and appropriate human oversight.
We Offer
- Competitive salary range: $132,948–$189,927 USD, plus equity.
- Benefits include health insurance, six-month paid parental leave, 401(k) retirement plan, monthly meal allowance, 23 paid days off, paid flexible holidays, and paid sick leave.
- Flexible work arrangements with some in-person meetings.
- Equal opportunity employer committed to inclusivity and accessibility in the recruitment process.
About the Company
At Spotify, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. We have ways to request reasonable accommodations during the interview process and help assist in what you need. If you need accommodations at any stage of the application or interview process, please let us know - we’re here to support you in any way we can.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us. Find our AI notice here: Spotify AI Notice
Apply for this job
Spotify Home Page
Jobs powered by
© Spotify Germany. This job description was sourced from the employer's public career page. TheJob is not the employer — we index the posting and route candidates to the source. All content rights and hiring decisions belong to the employer.