Security Engineer – Product Security

Spotify

. Build and improve agentic AI workflows that turn security vulnerability findings into tested, review-ready code changes for engineering teams across Spotify .

Posted 11/4/2026full-timeRemote • New York • United States, CanadaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in software engineering with a focus on security engineering and AI-assisted development workflows. Proficient in designing scalable systems and integrating security tools into production environments while maintaining a strong understanding of security risks and vulnerabilities.

Highest-signal resume keywords

Software EngineeringSecurity EngineeringJava ProgrammingPython ProgrammingAI-Assisted Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

JavaPythonScalaC++TypeScriptScalable Systems DesignSoftware ArchitectureAgentic AI SystemsAutomated WorkflowsVulnerability Remediation

Soft Skills

CollaborationFeedback NavigationAmbiguity ManagementInnovative ThinkingDeveloper Experience

Industry Keywords

Security VulnerabilityAutomated Fix QualitySecurity Posture ManagementAttack VectorsAI Model Evaluation

Tech Stack

Tools & technologies

JavaPythonScalaTypeScriptC++

About the role

Key responsibilities & impact

Build and improve agentic AI workflows that turn security vulnerability findings into tested, review-ready code changes for engineering teams across Spotify
Design and implement evaluation frameworks to measure automated-fix quality, including correctness, completeness, safety, build and test success, and pull request merge rates
Develop tools and processes to compare remediation approaches, evaluate AI models, and improve the reliability and effectiveness of generated fixes
Research and apply emerging practices in AI-assisted vulnerability remediation, including prompt engineering, context engineering, and vulnerability-specific fix guidance
Identify vulnerability types suitable for automated remediation while balancing security impact, technical feasibility, and developer experience
Collaborate with developers and security stakeholders to collect feedback through code reviews, pull requests, support channels, and interactive sessions
Build scalable solutions that reduce security risks and make it easier for teams to address vulnerabilities
Help shape Spotify’s approach to security posture management

Requirements

What you’ll need

Experience in software engineering, particularly within security engineering, developer experience, or internal infrastructure
Ability to confidently read, understand, and write code in one or more of Java, Python, Scala, C++, or TypeScript
Experience designing and building scalable systems
Understanding of software architecture and reliable engineering practices
Experience with agentic AI systems or AI-assisted development workflows
Understanding of common security risks, attack vectors, and vulnerabilities, including those affecting AI and machine learning systems, and approaches to mitigating them
Experience integrating security tools or automated workflows into production engineering environments
Familiarity with agentic AI frameworks and approaches to evaluating the quality, reliability, and safety of AI-generated outputs
Comfortable collaborating across teams, learning from feedback, navigating ambiguity, and balancing innovation with thoughtful security decisions
Availability to work in the EST time zone

Benefits

Comp & perks

Equal opportunity employer
Reasonable accommodations during the interview and application process
Accessibility support throughout recruitment