Opportunity at
SpotifySecurity Engineer - Product Security
Spotify is seeking a Security Engineer specializing in Product Security to join its Platform team in Toronto. Spotify builds audio streaming technology that supports hundreds of…
Career Tools
About This Role
Spotify is seeking a Security Engineer specializing in Product Security to join its Platform team in Toronto. Spotify builds audio streaming technology that supports hundreds of millions of users globally. Within the Platform group, the Product Security team monitors security posture, manages vulnerabilities, and assists leadership and developers with risk decisions. As artificial intelligence transforms vulnerability management, Spotify is creating automated workflows to turn security findings into review-ready code changes.…
Job Description
Spotify is seeking a Security Engineer specializing in Product Security to join its Platform team in Toronto. Spotify builds audio streaming technology that supports hundreds of millions of users globally. Within the Platform group, the Product Security team monitors security posture, manages vulnerabilities, and assists leadership and developers with risk decisions. As artificial intelligence transforms vulnerability management, Spotify is creating automated workflows to turn security findings into review-ready code changes.
This role focuses on designing evaluation frameworks, building agentic AI tools, and establishing processes to safely automate vulnerability remediation. The position suits an engineer experienced in software development, security engineering, and agentic AI systems who wants to build scalable solutions that help development teams mitigate risks efficiently.
Responsibilities
- Build and enhance agentic AI workflows that convert security vulnerabilities into tested code modifications for engineering teams
- Design evaluation frameworks to measure automated fix quality, correctness, safety, test success, and merge rates
- Develop tools and processes for comparing remediation approaches and evaluating AI models to improve fix reliability
- Research and apply AI-assisted remediation practices such as prompt engineering, context engineering, and fix guidance
- Determine which vulnerability types suit automated remediation based on security impact and technical feasibility
- Collaborate with developers and security stakeholders to gather feedback via code reviews and support channels to enhance remediation quality
- Contribute to security posture management by creating scalable solutions that minimize security risks
Requirements
- Experience in software engineering, security engineering, developer experience, or internal infrastructure
- Ability to read, write, and understand code in Java, Python, Scala, C++, or TypeScript
- Experience designing and building scalable systems with an understanding of software architecture
- Background working with agentic AI systems or AI-assisted development workflows
- Knowledge of common security risks, attack vectors, and vulnerabilities affecting AI and machine learning systems
- Experience integrating security tools or automated workflows into production engineering environments
- Familiarity with agentic AI frameworks and methods for evaluating the quality and safety of AI outputs
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this job located?
This role is based in Toronto with flexibility to work from home, though some in-person meetings are required.
What is the employment type?
The employment type is full-time.
What programming languages are required?
Candidates must be able to read, understand, and write code in one or more languages including Java, Python, Scala, C++, or TypeScript.
What is the salary for this position?
The job posting does not specify a salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
