AI Security Engineer II

Spotify; London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Spotify is seeking an AI Security Engineer to enhance security in AI/ML environments. You will implement best practices, manage threats, and ensure system integrity for millions of users. This flexible position offers opportunity to work from either London or Stockholm, focused on cutting-edge security challenges.

Qualifications

• 3+ years of professional experience in security engineering.
• Strong foundation in core security domains.
• Experience integrating security tooling into production systems at scale.

Responsibilities

• Develop and implement security best practices for AI/ML deployment.
• Conduct threat modeling and security reviews for AI systems.
• Drive vulnerability mitigation specific to AI/ML systems.

Skills

Security Engineering

MLOps

Cryptography

Cloud Security

Application Security

Security Research

Job description

Spotify is seeking a passionate and skilled AI Security Engineer to join the Security team and work closely with the teams building the next generation of AI powered experiences. You will be at the forefront of securing systems that impact hundreds of millions of users daily. You'll tackle unique security challenges at scale, ensuring the resilience, integrity, and trustworthiness of models, data pipelines and systems that drive personalized user experiences to delight users.

What You'll Do

• Champion and contribute to the development and implementation of security best practices, standards, and automated tooling for secure AI/ML development and deployment within Spotify's infrastructure.
• Partner closely with squads across the company to integrate security seamlessly into their development lifecycle, from ideation to deployment and monitoring.
• Conduct threat modeling, security reviews, and risk assessments for Spotify's diverse range of generative AI and machine learning systems.
• Identify, analyze, and drive mitigation for vulnerabilities specific to AI/ML, including data poisoning, adversarial examples and model extraction.
• Stay ahead of the curve on the rapidly evolving landscape of AI security threats, academic research, vulnerabilities, and mitigation strategies relevant to Spotify's scale and domain.
• Contribute to security incident response activities involving AI systems.
• Develop and deliver security guidance and awareness training tailored to AI/ML practitioners at Spotify.
• Evaluate, prototype, and integrate specialized security tools for AI/ML systems.

Who You Are

• 3+ years of professional experience with security engineering and embedding security into MLOps and AI/ML powered systems.
• You are comfortable writing code to integrate security tools and automate your work with modern software development practices.
• Strong foundation in core security domains such as cryptography, cloud security and application security.
• Good understanding of common security risks, attack vectors, and vulnerabilities specific to AI/ML systems and how to mitigate them.
• You are comfortable working with diverse stakeholders and explaining security concepts to non-expert audiences.
• Demonstrable experience with security research on AI/ML systems and applications.
• Experience integrating security tooling into production systems at scale.
• Familiarity with common agentic AI frameworks.

Where You'll Be

• This role is based in London or Stockholm.
• We offer you the flexibility to work where you work best! There will be some in person meetings, but still allows for flexibility to work from home.