Security Engineer - Product Security

The Platform team at Spotify creates technology that enables rapid growth and scaling. As a Security Engineer in the Product Security team, you will help protect Spotify's environment and users by transforming vulnerability findings into reliable code improvements using AI.

Responsibilities

• Build and improve AI workflows that turn security vulnerability findings into tested code changes for engineering teams.
• Design evaluation frameworks to measure the quality of automated fixes, including correctness and safety.
• Develop tools to compare remediation approaches and continuously improve generated fixes.
• Research emerging practices in AI-assisted vulnerability remediation.
• Identify suitable vulnerability types for automated remediation, balancing security impact and developer experience.
• Collaborate with developers and security stakeholders to collect feedback and improve remediation quality.
• Help shape Spotify's security posture management by building scalable solutions.

Requirements

• Experience in software engineering, particularly within security engineering or developer experience.
• Proficiency in one or more languages such as Java, Python, Scala, C++, or TypeScript.
• Experience designing and building scalable systems with reliable engineering practices.
• Familiarity with agentic AI systems and AI-assisted development workflows.
• Understanding of common security risks and approaches to mitigating them.
• Experience integrating security tools or automated workflows into production environments.
• Ability to collaborate across teams and navigate ambiguity.