Security Analyst, NHI (Non-Human Identity)

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers.

At Spotify, security helps make innovation possible. Our Enterprise Security team protects the systems and technology that support our employees and the more than 700 million people who use Spotify. We're looking for a Security Engineer to help strengthen our enterprise security across identity, devices, networks, and AI-powered tools. You'll build practical solutions, work with teams across the business, and help us create a secure environment where people can do their best work.

What You'll Do

Improve enterprise security by identifying risks and implementing solutions that protect Spotify while supporting a great employee experience.
Design and build security tools, integrations, and automation to make security processes more effective and scalable.
Analyze security data to identify gaps, understand emerging risks, and guide improvements.
Implement security controls across identity and access management, enterprise applications, endpoints, and cloud-based services.
Assess security risks associated with AI tools and agents, and help develop safeguards that support responsible adoption.
Collaborate with IT, infrastructure, and security teams to strengthen security across devices, networks, and enterprise systems.
Evaluate and improve enterprise security technologies, including managed browsers and device security tools.
Share your expertise and work with colleagues across technical and non-technical teams to make security practices clear, practical, and effective.

Who You Are

You are a security engineer with experience in securing a fast moving technology company. Alternatively, you have expertise in enterprise systems engineering and are ready to transition into a security-focused career.

You have demonstrated experience applying enterprise security principles across IAM, SSO, networking, and device management, and you understand how these domains interrelate to form a cohesive security foundation.

You can think like an attacker and understand how to identify risks and implement countermeasures against threats that span identity, endpoint, network, and cloud boundaries.

You have a solid understanding of the risks introduced by agentic AI in an enterprise context and you are keen to get hands-on identifying and mitigating these risks in our environment.

You actively leverage AI tooling to augment your own work and are eager to explore how emerging AI capabilities can be applied to enterprise security challenges.

You can critically evaluate tools, practices and procedures, and you're willing to advocate for improvements and change when you see opportunities or risk.

You have an understanding of the current threat landscape, and want to be part of a team creating and implementing state of the art security solutions in an AI-enabled enterprise environment.

You communicate complex security topics clearly to both technical and non-technical audiences, and you're comfortable working across a global, cross-functional organization.

You thrive in a flexible environment with broad scope and you're energized by the freedom to innovate and challenge conventional security thinking.

Where You'll Be

This role is based in Stockholm or London
We offer you the flexibility to work where you work best! There will be some in person meetings, but still allows for flexibility to work from home.

Spotify is an equal opportunity employer. You are welcome at Spotify for who you are, no matter where you come from, what you look like, or what’s playing in your headphones. Our platform is for everyone, and so is our workplace. The more voices we have represented and amplified in our business, the more we will all thrive, contribute, and be forward-thinking! So bring us your personal experience, your perspectives, and your background. It’s in our differences that we will find the power to keep revolutionizing the way the world listens.

At Spotify, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. We have ways to request reasonable accommodations during the interview process and help assist in what you need. If you need accommodations at any stage of the application or interview process, please let us know - we’re here to support you in any way we can.

Job Description

What You'll Do

Improve enterprise security by identifying risks and implementing solutions that protect Spotify while supporting a great employee experience.
Design and build security tools, integrations, and automation to make security processes more effective and scalable.
Analyze security data to identify gaps, understand emerging risks, and guide improvements.
Implement security controls across identity and access management, enterprise applications, endpoints, and cloud-based services.
Assess security risks associated with AI tools and agents, and help develop safeguards that support responsible adoption.
Collaborate with IT, infrastructure, and security teams to strengthen security across devices, networks, and enterprise systems.
Evaluate and improve enterprise security technologies, including managed browsers and device security tools.
Share your expertise and work with colleagues across technical and non-technical teams to make security practices clear, practical, and effective.

Who You Are

You can think like an attacker and understand how to identify risks and implement countermeasures against threats that span identity, endpoint, network, and cloud boundaries.

You have a solid understanding of the risks introduced by agentic AI in an enterprise context and you are keen to get hands-on identifying and mitigating these risks in our environment.

You actively leverage AI tooling to augment your own work and are eager to explore how emerging AI capabilities can be applied to enterprise security challenges.

You can critically evaluate tools, practices and procedures, and you're willing to advocate for improvements and change when you see opportunities or risk.

You have an understanding of the current threat landscape, and want to be part of a team creating and implementing state of the art security solutions in an AI-enabled enterprise environment.

You communicate complex security topics clearly to both technical and non-technical audiences, and you're comfortable working across a global, cross-functional organization.

You thrive in a flexible environment with broad scope and you're energized by the freedom to innovate and challenge conventional security thinking.

Where You'll Be

This role is based in Stockholm or London
We offer you the flexibility to work where you work best! There will be some in person meetings, but still allows for flexibility to work from home.

Job Description

What You'll Do

Improve enterprise security by identifying risks and implementing solutions that protect Spotify while supporting a great employee experience.
Design and build security tools, integrations, and automation to make security processes more effective and scalable.
Analyze security data to identify gaps, understand emerging risks, and guide improvements.
Implement security controls across identity and access management, enterprise applications, endpoints, and cloud-based services.
Assess security risks associated with AI tools and agents, and help develop safeguards that support responsible adoption.
Collaborate with IT, infrastructure, and security teams to strengthen security across devices, networks, and enterprise systems.
Evaluate and improve enterprise security technologies, including managed browsers and device security tools.
Share your expertise and work with colleagues across technical and non-technical teams to make security practices clear, practical, and effective.

Who You Are

You can think like an attacker and understand how to identify risks and implement countermeasures against threats that span identity, endpoint, network, and cloud boundaries.

You have a solid understanding of the risks introduced by agentic AI in an enterprise context and you are keen to get hands-on identifying and mitigating these risks in our environment.

You actively leverage AI tooling to augment your own work and are eager to explore how emerging AI capabilities can be applied to enterprise security challenges.

You can critically evaluate tools, practices and procedures, and you're willing to advocate for improvements and change when you see opportunities or risk.

You have an understanding of the current threat landscape, and want to be part of a team creating and implementing state of the art security solutions in an AI-enabled enterprise environment.

You communicate complex security topics clearly to both technical and non-technical audiences, and you're comfortable working across a global, cross-functional organization.

You thrive in a flexible environment with broad scope and you're energized by the freedom to innovate and challenge conventional security thinking.

Where You'll Be

This role is based in Stockholm or London
We offer you the flexibility to work where you work best! There will be some in person meetings, but still allows for flexibility to work from home.

Job Description

What You'll Do

Improve enterprise security by identifying risks and implementing solutions that protect Spotify while supporting a great employee experience.
Design and build security tools, integrations, and automation to make security processes more effective and scalable.
Analyze security data to identify gaps, understand emerging risks, and guide improvements.
Implement security controls across identity and access management, enterprise applications, endpoints, and cloud-based services.
Assess security risks associated with AI tools and agents, and help develop safeguards that support responsible adoption.
Collaborate with IT, infrastructure, and security teams to strengthen security across devices, networks, and enterprise systems.
Evaluate and improve enterprise security technologies, including managed browsers and device security tools.
Share your expertise and work with colleagues across technical and non-technical teams to make security practices clear, practical, and effective.

Who You Are

You can think like an attacker and understand how to identify risks and implement countermeasures against threats that span identity, endpoint, network, and cloud boundaries.

You have a solid understanding of the risks introduced by agentic AI in an enterprise context and you are keen to get hands-on identifying and mitigating these risks in our environment.

You actively leverage AI tooling to augment your own work and are eager to explore how emerging AI capabilities can be applied to enterprise security challenges.

You can critically evaluate tools, practices and procedures, and you're willing to advocate for improvements and change when you see opportunities or risk.

You have an understanding of the current threat landscape, and want to be part of a team creating and implementing state of the art security solutions in an AI-enabled enterprise environment.

You communicate complex security topics clearly to both technical and non-technical audiences, and you're comfortable working across a global, cross-functional organization.

You thrive in a flexible environment with broad scope and you're energized by the freedom to innovate and challenge conventional security thinking.

Where You'll Be

This role is based in Stockholm or London
We offer you the flexibility to work where you work best! There will be some in person meetings, but still allows for flexibility to work from home.