Security Engineer - Product Security
Core
Build agentic AI workflows and evaluation frameworks to transform security vulnerability findings into reliable, automated code improvements for Spotify's engineering teams.
Role type
Senior IC security engineer (AI-assisted vulnerability remediation)
Builds
Automated remediation tools, evaluation frameworks, and AI workflows for security posture management
Domain
Cybersecurity + AI/ML engineering
Deliverable
production ML models
Required skills
Software engineering, security engineering, agentic AI systems, prompt engineering, vulnerability management, software architecture, scalable system design, code review integration
Preferred skills
Experience with Java, Python, Scala, C++, or TypeScript; familiarity with AI-assisted development workflows; experience integrating security tools into production environments
Technologies
Java, Python, Scala, C++, TypeScript, agentic AI frameworks
Responsibilities
Build and improve agentic AI workflows that turn security vulnerability findings into tested, review-ready code changes; Design and implement evaluation frameworks to measure the quality of automated fixes; Develop tools to compare remediation approaches and evaluate AI models; Research and apply emerging practices in AI-assisted vulnerability remediation; Identify vulnerability types suitable for automated remediation; Collaborate with developers and security stakeholders to collect feedback and improve remediation quality
Seniority
Senior, hands-on IC
