Sr Product Security Engineer | Remote | Europe

Role overview

Help build a proactive security practice for a product and its internal systems. You’ll identify and reduce risks through threat modelling, technical investigation, and close partnership with engineering, cloud, IT, data, and business teams. The work spans product security, incident readiness, vulnerability handling, and customer assurance, with room to focus on complementary security strengths.

Responsibilities

- Assess threats and risks across product features, AI agents, infrastructure, corporate systems, and data; recommend practical controls. - Review designs with technical teams and help embed security through requirements, secure coding guidance, reviews, documentation, and tooling. - Improve logging, monitoring, incident response processes, runbooks, and exercises; coordinate remediation and check that controls work. - Triage vulnerability reports, reproduce and assess findings, coordinate fixes, and support disclosure and bug bounty processes. - Support continuous compliance monitoring and evidence collection, including work related to SOC 2. - Help respond to customer security reviews and collaborate with legal, finance, and other stakeholders on policies and enterprise trust.

Requirements

- Hands-on experience assessing real systems, judging the severity of security risks, and recommending controls teams can implement. - Practical product, application, or infrastructure security experience in a product-focused environment. - Ability to validate findings, reproduce vulnerabilities, create proof-of-concepts, and write code or automation when useful. - Skill in advising teams, influencing decisions without formal authority, and guiding remediation for systems you do not own. - Familiarity with LLM-assisted tools and their limitations, security implications, and failure modes. - Strong communication skills for explaining technical risks and making remediation actionable.

Nice to have

Experience securing AI applications or agents, corporate identity and compliance tools, open-source products, or cloud infrastructure; penetration testing experience; or experience establishing security practices in a growing organization.

Benefits and work setup

The team works remotely across Europe, with regular off-sites, and uses English as its working language. Visa sponsorship is available for Germany; elsewhere, applicants need existing work authorization. Benefits include equity, 30 days of European vacation plus local public holidays, locally aligned health and pension provisions, and an annual learning budget of €1,000 or equivalent. A monthly contribution is also available for supporting open-source projects.