- Company: Spotify
- Location: New York, NY; Toronto
- Job type: Permanent
About the role
Spotify’s Platform team is looking for a Security Engineer to join the Product Security team. In this role, you will help protect Spotify’s environment and its more than 700 million users. You will focus on transforming security vulnerability findings into reliable, actionable code improvements using agentic AI. Your work will involve building tools, workflows, and evaluation frameworks that make automated remediation more effective, scalable, and safe.
Responsibilities
- Build and improve agentic AI workflows that convert security vulnerability findings into tested, review-ready code changes.
- Design and implement evaluation frameworks to measure the quality of automated fixes, including correctness, completeness, safety, and build success.
- Develop tools and processes to compare remediation approaches and evaluate AI models to improve reliability.
- Research and apply emerging practices in AI-assisted vulnerability remediation, such as prompt engineering and context engineering.
- Identify which vulnerability types are suitable for automated remediation by balancing security impact and developer experience.
- Collaborate with developers and security stakeholders to collect feedback and improve remediation quality.
- Help shape Spotify’s approach to security posture management by building scalable solutions that reduce risks.
Requirements
- Experience in software engineering, particularly within security engineering, developer experience, or internal infrastructure.
- Confident ability to read, understand, and write code in one or more languages such as Java, Python, Scala, C++, or TypeScript.
- Experience designing and building scalable systems with an understanding of software architecture.
- Work experience with agentic AI systems or AI-assisted development workflows.
- Understanding of common security risks, attack vectors, and vulnerabilities, including those affecting AI and machine learning systems.
- Experience integrating security tools or automated workflows into production engineering environments.
- Familiarity with agentic AI frameworks and approaches to evaluating the quality and safety of AI-generated outputs.
Pay and benefits
Specific salary details and benefits are not listed in the job advertisement. This role is based in the EST time zone.
How to apply
Apply directly on Spotify’s own careers website. Omadaily never charges job seekers.
