Build agentic AI workflows as a Product Security Engineer at Spotify in Toronto, transforming vulnerabilities into tested code improvements. Flexible home working includes some in-person meetings.Within Spotify’s Platform Product Security team, you will improve vulnerability remediation for engineering teams. The work combines software engineering, security engineering, AI-assisted development, scalable systems, and evaluation frameworks.
You will help make automated fixes more reliable, protected, and actionable for developers.Key Responsibilities:
Build agentic AI workflows for tested security fixesDesign evaluation frameworks for automated remediation qualityCompare remediation approaches and evaluate AI modelsResearch prompt and context engineering practicesIdentify vulnerabilities suitable for automated remediationRequirements:
Experience in software, security, developer experience, or infrastructure engineeringAbility to write Java, Python, Scala, C++, or TypeScriptExperience designing scalable systems and reliable architectureExperience with agentic AI or AI-assisted development workflowsUnderstanding of vulnerabilities, attack vectors, and mitigation approachesBring security engineering, agentic AI, and scalable systems experience to improve Spotify’s vulnerability remediation in Toronto.