Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
About the role
- Security Engineer building agentic AI workflows and evaluation frameworks for Spotify’s vulnerability management platform. Improving automated security fixes for developers across the music-streaming business.
Responsibilities
- Build and improve agentic AI workflows that turn security vulnerability findings into tested, review-ready code changes for engineering teams across Spotify
- Design and implement evaluation frameworks to measure automated-fix quality, including correctness, completeness, safety, build and test success, and pull request merge rates
- Develop tools and processes to compare remediation approaches, evaluate AI models, and improve the reliability and effectiveness of generated fixes
- Research and apply emerging practices in AI-assisted vulnerability remediation, including prompt engineering, context engineering, and vulnerability-specific fix guidance
- Identify vulnerability types suitable for automated remediation while balancing security impact, technical feasibility, and developer experience
- Collaborate with developers and security stakeholders to collect feedback through code reviews, pull requests, support channels, and interactive sessions
- Build scalable solutions that reduce security risks and make it easier for teams to address vulnerabilities
- Help shape Spotify’s approach to security posture management
Requirements
- Experience in software engineering, particularly within security engineering, developer experience, or internal infrastructure
- Ability to confidently read, understand, and write code in one or more of Java, Python, Scala, C++, or TypeScript
- Experience designing and building scalable systems
- Understanding of software architecture and reliable engineering practices
- Experience with agentic AI systems or AI-assisted development workflows
- Understanding of common security risks, attack vectors, and vulnerabilities, including those affecting AI and machine learning systems, and approaches to mitigating them
- Experience integrating security tools or automated workflows into production engineering environments
- Familiarity with agentic AI frameworks and approaches to evaluating the quality, reliability, and safety of AI-generated outputs
- Comfortable collaborating across teams, learning from feedback, navigating ambiguity, and balancing innovation with thoughtful security decisions
- Availability to work in the EST time zone
Benefits
- Equal opportunity employer
- Reasonable accommodations during the interview and application process
- Accessibility support throughout recruitment
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Avaya Aura security remediation consultant securing enterprise voice environments for Canadian clients. Applying Service Packs, hardening systems, and documenting production changes.
Desjardins security advisor managing ServiceNow SecOps and enterprise vulnerability management. Assessing risks, prioritizing remediation, and guiding IT and business stakeholders.
DNS and email security advisor at Desjardins, a financial cooperative. Deploying DNS, email security, and domain safeguards while troubleshooting complex infrastructure issues.
Staff Software Engineer leading backend architecture for Coalition Control, a cybersecurity risk platform. Building secure distributed services and mentoring Security Engineering teams across Canada.
IT Security Engineer owning identity, endpoint, email, and access controls. Protecting Alpaca’s global brokerage infrastructure and supporting security incident response.
Head of Security protecting Helius’s Solana developer platform and critical infrastructure. Owning incident response, cloud security, compliance, and security - team growth.
Senior Security Specialist protecting BDO Canada’s enterprise systems through threat detection, incident response, and vulnerability management. Supporting security operations across blended office, client - site, and virtual environments.
Cybersecurity Lead strengthening Irth’s SaaS security program for utility infrastructure operators. Owning vulnerability management, incident response, cloud security, compliance, and customer trust.
AI Security Architect defining secure AI architectures, governance, and risk frameworks. Levio delivers digital transformation and large - scale technology projects for clients.