A
Aiven

Staff Product Security Engineer

Lead–Principal Hybrid Helsinki, Finland Full-time نُشرت منذ شهرين

المهارات والتقنيات

Skills
Cloud Security ISO 27001 PCI DSS SOC 2 Vulnerability Management

عن الوظيفة

The Staff Product Security Engineer role at Aiven is based in Helsinki, Finland, with seniority listed as Lead to Principal. You will manage the bug bounty program, advise on security for new products, and collaborate with Identity and Access Management and Security Operations.

Work format

This is a full-time position with a hybrid work arrangement. The listed English level is C1.

Skills and tools

  • Vulnerability Management
  • Cloud Security
  • PCI DSS
  • ISO 27001
  • SOC 2

What to prepare

  • Prepare a vulnerability walkthrough covering triage, false positives, remediation validation, and scanning coverage.
  • Choose an example showing how your security testing documentation supported compliance or an audit.

المسؤوليات

  • Analyze vulnerability scanner results, document false positives, and identify gaps in scanning coverage.
  • Review internal network scans and coordinate vulnerability prioritization, remediation, and escalation.
  • Test product security using manual and tool-based methods, documenting findings and testing methodologies.
  • Triage reported vulnerabilities, check reproducibility, and validate engineering fixes.
  • Prepare vulnerability scanning documentation for PCI DSS, ISO 27001, and SOC 2 compliance.
  • Support third-party audits and penetration tests, including responses to audit questions.
  • Help automate identity and access management procedures and reporting.
  • Assess the security of artificial intelligence algorithms in Aiven products.

المتطلبات

  • 5+ years of experience in information security or a related field.
  • A bachelor's or master's degree in a relevant computing, engineering, or security discipline, or equivalent training.
  • Knowledge of security, distributed systems, and microservices architecture.
  • Understanding of risk management, vulnerability management, and cloud security in multi-cloud environments.
  • Experience with public cloud, networking, programming, and software development.
  • Senior certifications in hyperscaler clouds and security testing.

Nice to have

  • Risk management certifications are beneficial, alongside experience in risk management.
  • Experience in site reliability engineering, IT architecture, business analysis, or project management is an asset.

قدّم لهذه الوظيفة

أرسل تعريفًا موجزًا — سيراجعه فريق التوظيف ويرد عليك.

A
Product

Helsinki-headquartered managed open source data platform offering PostgreSQL, Apache Kafka, ClickHouse, OpenSearch and Valkey as a service across the major clouds. Most engineering roles are based at

الموقع
Helsinki, Finland
حجم الفريق
201-500
سياسة العمل عن بُعد
Hybrid
View company profile

نظرة عامة

Seniority
Lead–Principal
Remote policy
Hybrid
Location
Helsinki, Finland
Employment
Full-time
English
C1
Posted
Aug 23, 2026

وظائف مشابهة