Build agentic AI vulnerability remediation workflows as a Security Engineer at Spotify, based in Toronto with versatile work from home.
Within Spotify’s Product Security team, you will transform vulnerability findings into tested, review-ready code changes. You will support security posture management through scalable tools, evaluation frameworks, and reliable engineering practices. The work spans software engineering, AI-assisted development, and vulnerability management.
Key Responsibilities
Build agentic AI workflows for tested security fixes
Design frameworks evaluating correctness, safety, and merge rates
Compare remediation approaches and evaluate AI models
Research prompt and context engineering practices
Identify vulnerabilities suitable for automated remediation
Requirements
Experience in software or security engineering
Code proficiency in Java, Python, Scala, C++, or TypeScript
Experience designing scalable systems and software architecture
Experience with agentic AI or AI-assisted development
Understanding of security risks, attack vectors, and vulnerabilities
Apply software engineering, agentic AI, and security expertise to improve Spotify’s automated vulnerability remediation in Toronto.