Staff Product Security Engineer

Lead–Principal Hybrid Helsinki, Finland Full-time Publicado hace 2 meses

Regístrate para postularte Iniciar sesión

Habilidades y stack

Skills

Cloud Security ISO 27001 PCI DSS SOC 2 Vulnerability Management

Sobre el puesto

The Staff Product Security Engineer role at Aiven is based in Helsinki, Finland, with seniority listed as Lead to Principal. You will manage the bug bounty program, advise on security for new products, and collaborate with Identity and Access Management and Security Operations.

Work format

This is a full-time position with a hybrid work arrangement. The listed English level is C1.

Skills and tools

Vulnerability Management
Cloud Security
PCI DSS
ISO 27001
SOC 2

What to prepare

Prepare a vulnerability walkthrough covering triage, false positives, remediation validation, and scanning coverage.
Choose an example showing how your security testing documentation supported compliance or an audit.

Responsabilidades

Analyze vulnerability scanner results, document false positives, and identify gaps in scanning coverage.
Review internal network scans and coordinate vulnerability prioritization, remediation, and escalation.
Test product security using manual and tool-based methods, documenting findings and testing methodologies.
Triage reported vulnerabilities, check reproducibility, and validate engineering fixes.
Prepare vulnerability scanning documentation for PCI DSS, ISO 27001, and SOC 2 compliance.
Support third-party audits and penetration tests, including responses to audit questions.
Help automate identity and access management procedures and reporting.
Assess the security of artificial intelligence algorithms in Aiven products.

Requisitos

5+ years of experience in information security or a related field.
A bachelor's or master's degree in a relevant computing, engineering, or security discipline, or equivalent training.
Knowledge of security, distributed systems, and microservices architecture.
Understanding of risk management, vulnerability management, and cloud security in multi-cloud environments.
Experience with public cloud, networking, programming, and software development.
Senior certifications in hyperscaler clouds and security testing.

Nice to have

Risk management certifications are beneficial, alongside experience in risk management.
Experience in site reliability engineering, IT architecture, business analysis, or project management is an asset.

Postúlate a este puesto

Envía una breve presentación: el equipo de contratación la revisará y responderá.

Crear cuenta de candidato Iniciar sesión

Aiven

Product

Helsinki-headquartered managed open source data platform offering PostgreSQL, Apache Kafka, ClickHouse, OpenSearch and Valkey as a service across the major clouds. Most engineering roles are based at

Ubicación: Helsinki, Finland
Tamaño del equipo: 201-500
Política de trabajo remoto: Hybrid

View company profile