20 days ago
Responsibilities
- Build agentic AI workflows that convert security vulnerability findings into tested, review-ready code changes.
- Design evaluation frameworks measuring correctness, completeness, safety, build and test success, and pull request merge rates.
- Develop tools and processes to compare remediation approaches, evaluate AI models, and improve generated fixes.
- Research prompt engineering, context engineering, and vulnerability-specific remediation guidance.
- Determine which vulnerability types are suitable for automated remediation.
- Collaborate with developers and security stakeholders to improve remediation quality through feedback.
- Build scalable security posture management solutions that reduce risks and simplify vulnerability remediation.
Requirements
- Experience in software engineering, particularly in security engineering, developer experience, or internal infrastructure.
- Ability to read, understand, and write code in one or more of Java, Python, Scala, C++, or TypeScript.
- Experience designing and building scalable systems with an understanding of software architecture and reliable engineering practices.
- Experience with agentic AI systems or AI-assisted development workflows.
- Understanding of security risks, attack vectors, vulnerabilities, and mitigation approaches, including those affecting AI and machine learning systems.
- Experience integrating security tools or automated workflows into production engineering environments.
- Familiarity with agentic AI frameworks and evaluating the quality, reliability, and safety of AI-generated outputs.
- Ability to collaborate across teams, learn from feedback, navigate ambiguity, and balance innovation with security decisions.
Benefits
- The role is based in the EST time zone.
- Spotify provides an inclusive, equal-opportunity workplace and reasonable accommodation support throughout the recruitment process.
Tech Stack
Categories
About Spotify
Spotify builds a global audio streaming platform for listeners and creators, offering on-demand music and podcasts across mobile, desktop, and connected devices. The business runs a freemium model: an ad-supported free tier and a paid Premium subscription, plus creator tools like Spotify for Artists and podcast publishing. Founded in 2006 and headquartered in Stockholm, it is a publicly traded company on the NYSE (SPOT) serving consumers and rights holders worldwide.