Senior Product Security Engineer

Role overview

The Senior Product Security Engineer plays a central role on a product security enablement team, partnering with engineering groups to embed security throughout the software development lifecycle. The position blends hands-on software engineering with security expertise, focusing on automation, pipeline hardening, and the exploration of AI-driven techniques for vulnerability detection and remediation. It operates within a global SaaS context where secure-by-default practices are treated as foundational rather than blocking.

Responsibilities

- Build and refine security automation that strengthens product build and deployment pipelines - Prototype and evaluate AI-based approaches for identifying and remediating vulnerabilities - Maintain and extend a central HTML sanitization service written in TypeScript - Operate Web Application Firewall rule sets and review outbound email security metrics - Apply Kubernetes and CI/CD hardening practices across the infrastructure footprint - Share context-specific vulnerability knowledge with product engineering teams and act as a trusted advisor during development

Requirements

- Practical experience with security disciplines such as penetration testing, secure software development, vulnerability management, SAST, and DAST - Strong programming skills in TypeScript, JavaScript, Kotlin, Java, Go, or Python - Hands-on experience with Unix and Kubernetes infrastructure, ideally provisioned through Terraform and Kustomize - Clear written and verbal communication skills in English; German is a plus

Benefits and work setup

- Competitive compensation package that includes a unit-based long-term incentive plan - Flexible working time models with hybrid options and an annual flex work allowance - Around 31 vacation days per year, plus additional scheduled days off during the summer period - Company pension scheme - One paid day off each year to support a social or community project