Security Engineer – Product Security

🔥 2 minutes ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

🗽 New York – Remote

🗽 New York – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 11%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Spotify

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 2008

📱 Media

👥 B2C

🛍️ eCommerce

Media • B2C • eCommerce

Spotify is a global audio streaming service company that offers its users access to a vast library of music and podcasts. Known for its focus on delivering personalized listening experiences, Spotify employs data scientists, engineers, and client partners across various global locations to continuously innovate and enhance its offerings. The company fosters a strong culture of diversity, equity, and impact, emphasizing belonging and inclusion in its workforce. Spotify is not only committed to shaping the future of audio entertainment but also to making a positive societal impact, with initiatives focused on social and environmental issues.

📋 Description

• Build and improve agentic AI workflows that turn security vulnerability findings into tested, review-ready code changes for engineering teams across Spotify • Design and implement evaluation frameworks to measure automated-fix quality, including correctness, completeness, safety, build and test success, and pull request merge rates • Develop tools and processes to compare remediation approaches, evaluate AI models, and improve the reliability and effectiveness of generated fixes • Research and apply emerging practices in AI-assisted vulnerability remediation, including prompt engineering, context engineering, and vulnerability-specific fix guidance • Identify vulnerability types suitable for automated remediation while balancing security impact, technical feasibility, and developer experience • Collaborate with developers and security stakeholders to collect feedback through code reviews, pull requests, support channels, and interactive sessions • Build scalable solutions that reduce security risks and make it easier for teams to address vulnerabilities • Help shape Spotify’s approach to security posture management

🎯 Requirements

• Experience in software engineering, particularly within security engineering, developer experience, or internal infrastructure • Ability to confidently read, understand, and write code in one or more of Java, Python, Scala, C++, or TypeScript • Experience designing and building scalable systems • Understanding of software architecture and reliable engineering practices • Experience with agentic AI systems or AI-assisted development workflows • Understanding of common security risks, attack vectors, and vulnerabilities, including those affecting AI and machine learning systems, and approaches to mitigating them • Experience integrating security tools or automated workflows into production engineering environments • Familiarity with agentic AI frameworks and approaches to evaluating the quality, reliability, and safety of AI-generated outputs • Comfortable collaborating across teams, learning from feedback, navigating ambiguity, and balancing innovation with thoughtful security decisions • Availability to work in the EST time zone

🏖️ Benefits

• Equal opportunity employer • Reasonable accommodations during the interview and application process • Accessibility support throughout recruitment

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume