Backend Engineer - Platform Security

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers. We are looking for a Backend Engineer II to join our Security Compliance Engineering team. You’ll help turn complex security, risk, and compliance requirements into scalable software solutions that make it easier for teams across Spotify to build and operate securely. You’ll work with engineers and partners across security to strengthen our technical Governance, Risk, and Compliance (GRC) capabilities.

Design and build backend products, services, and infrastructure that strengthen Spotify’s technical security Governance, Risk, and Compliance strategy. Build scalable infrastructure and tooling that help apply regulatory requirements and security framework controls across Spotify’s distributed environment. Develop reliable services that automate security and compliance processes, reducing manual work and helping engineering teams understand and meet requirements. Work with security, engineering, and other partners to translate security and compliance requirements into practical technical solutions. Contribute to consistent engineering practices that address security, risk, and compliance requirements while supporting teams at scale. Own the quality of your work from design and development through deployment, operation, and continuous improvement.

You have experience developing backend software using an object-oriented programming language such as Java and are comfortable working with data. You have experience building distributed, high-volume services and deploying and operating them in production. You understand system design, data structures, and algorithms and can apply these concepts to practical engineering problems. You care about software quality and build reliable, maintainable solutions. You have experience implementing security controls or safeguards in software systems and familiarity with cybersecurity or security GRC frameworks. You enjoy collaborating with others to understand technical requirements, explore trade-offs, and iterate on solutions. You’re interested in information security governance, risk, and compliance and are motivated to deepen your knowledge in this space. You communicate clearly with technical and non-technical partners and can explain complex topics to different audiences.

This role is based in London or Stockholm We offer you the flexibility to work where you work best! There will be some in person meetings, but still allows for flexibility to work from home