Backend Engineer - Platform Security

Software EngineeringEngineeringHybrid

Spotify is hiring a Backend Engineer - Platform Security in London, England (hybrid). Posted 6 October 2026. Apply directly on Spotify's own careers site — no account needed.

Apply at Spotify Save

The Platform team creates the technology that enables Spotify to learn quickly and scale easily, enabling rapid growth in our users and our business around the globe. Spanning many disciplines, we work to make the business work; creating the infrastructure, tooling, frameworks, and capabilities needed to welcome a billion customers.

We are looking for a Backend Engineer II to join our Security Compliance Engineering team. You’ll help turn complex security, risk, and compliance requirements into scalable software solutions that make it easier for teams across Spotify to build and operate securely. You’ll work with engineers and partners across security to strengthen our technical Governance, Risk, and Compliance (GRC) capabilities.

What You'll Do

Design and build backend products, services, and infrastructure that strengthen Spotify’s technical security Governance, Risk, and Compliance strategy.
Build scalable infrastructure and tooling that help apply regulatory requirements and security framework controls across Spotify’s distributed environment.
Develop reliable services that automate security and compliance processes, reducing manual work and helping engineering teams understand and meet requirements.
Work with security, engineering, and other partners to translate security and compliance requirements into practical technical solutions.
Contribute to consistent engineering practices that address security, risk, and compliance requirements while supporting teams at scale.
Own the quality of your work from design and development through deployment, operation, and continuous improvement.

Who You Are

You have experience developing backend software using an object-oriented programming language such as Java and are comfortable working with data.
You have experience building distributed, high-volume services and deploying and operating them in production.
You understand system design, data structures, and algorithms and can apply these concepts to practical engineering problems.
You care about software quality and build reliable, maintainable solutions.
You have experience implementing security controls or safeguards in software systems and familiarity with cybersecurity or security GRC frameworks.
You enjoy collaborating with others to understand technical requirements, explore trade-offs, and iterate on solutions.
You’re interested in information security governance, risk, and compliance and are motivated to deepen your knowledge in this space.
You communicate clearly with technical and non-technical partners and can explain complex topics to different audiences.

Where You'll Be

This role is based in London or Stockholm
We offer you the flexibility to work where you work best! There will be some in person meetings, but still allows for flexibility to work from home

Spotify is an equal opportunity employer. You are welcome at Spotify for who you are, no matter where you come from, what you look like, or what’s playing in your headphones. Our platform is for everyone, and so is our workplace. The more voices we have represented and amplified in our business, the more we will all thrive, contribute, and be forward-thinking! So bring us your personal experience, your perspectives, and your background. It’s in our differences that we will find the power to keep revolutionizing the way the world listens.

At Spotify, we are passionate about inclusivity and making sure our entire recruitment process is accessible to everyone. We have ways to request reasonable accommodations during the interview process and help assist in what you need. If you need accommodations at any stage of the application or interview process, please let us know - we’re here to support you in any way we can.

Listings are read directly from each employer's careers system (Greenhouse, Lever, Ashby, SmartRecruiters and Workday) and refreshed daily. hire.run never copies other job boards, and Apply always goes to the employer's own site.