Security Engineer - Product Security

New

SpotifyProduct security

Listing location: New York, NY / Toronto, EST time zoneFull-Time

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Have experience in software engineering, particularly within security engineering, developer experience, or internal infrastructure.
Be able to read, understand, and write code in one or more of Java, Python, Scala, C++, or TypeScript.
Have experience designing and building scalable systems.
Understand software architecture and reliable engineering practices.
Have worked with agentic AI systems or AI-assisted development workflows and understand their application to engineering challenges.
Understand common security risks, attack vectors, and vulnerabilities, including those affecting AI and machine learning systems, and approaches to mitigating them.
Have experience integrating security tools or automated workflows into production engineering environments.
Be familiar with agentic AI frameworks and approaches for evaluating AI-generated output quality, reliability, and safety.

Build and improve agentic AI workflows that turn security vulnerability findings into tested, review-ready code changes.
Design evaluation frameworks for automated fixes, measuring correctness, completeness, safety, build and test success, and pull request merge rates.
Develop tools and processes to compare remediation approaches, evaluate AI models, and improve generated-fix reliability and effectiveness.
Research and apply practices in AI-assisted vulnerability remediation, including prompt engineering, context engineering, and vulnerability-specific fix guidance.
Identify vulnerability types suitable for automated remediation, balancing security impact, technical feasibility, and developer experience.
Collect feedback from developers and security stakeholders through code reviews, pull requests, support channels, and interactive sessions.
Build scalable security posture management solutions that reduce security risks and help teams address vulnerabilities.

View Full Description & ApplyYou'll be redirected to the employer's site