Principal Engineer, Product Security (m/f/x)

• Define product security strategy, drive adoption, and assess security maturity.
• Establish security architecture standards and operational practices; track risks through remediation.
• Coach product teams on risk assessment, threat modeling, and secure API-first design.
• Review requirements and designs, and integrate security tooling into development.
• Review external penetration test findings, prioritize fixes, and investigate new attack vectors.
• Lead customer security discussions and support certification audits.
• Coordinate security initiatives with Product Management, Principal Engineers, and legal and compliance teams.

• 5+ years of hands-on product security experience and 2+ years in product security leadership.
• Experience in customer-facing security roles and influencing roadmaps within matrix organizations.
• Experience handling competing priorities in a scale-up environment and clarifying requirements.
• Experience with secure architecture reviews, SDLC security, static analysis, and secure code review implementations.
• Knowledge of Linux, Kubernetes, Terraform, Vault, API security, and web application security.
• Practical DevSecOps experience and proficiency in a scripting language such as JavaScript or Go.
• Cross-team project management, Agile experience, and experience delivering training or onboarding.
• Interest in learning and applying AI tools.

Nice to have

• Security certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certifications.