Build agentic AI workflows as a Product Security Engineer at Spotify in Toronto, transforming vulnerabilities into tested code improvements. Versatile home working includes some in-person meetings.
Within Spotify’s Platform Product Security team, you will improve vulnerability remediation for engineering teams. The work combines software engineering, security engineering, AI-assisted development, scalable systems, and evaluation frameworks. You will help make automated fixes more reliable, safe, and actionable for developers.
Key Responsibilities
Build agentic AI workflows for tested security fixes
Design evaluation frameworks for automated remediation quality
Compare remediation approaches and evaluate AI models
Research prompt and context engineering practices
Identify vulnerabilities suitable for automated remediation
Requirements
Experience in software, security, developer experience, or infrastructure engineering
Ability to write Java, Python, Scala, C++, or TypeScript
Experience designing scalable systems and reliable architecture
Experience with agentic AI or AI-assisted development workflows
Understanding of vulnerabilities, attack vectors, and mitigation approaches
Bring security engineering, agentic AI, and scalable systems experience to improve Spotify’s vulnerability remediation in Toronto.