Staff Product Security Engineer

Lead–Principal Hybrid Helsinki, Finland Full-time Posted 2 months ago

Skills & stack

Skills

Cloud Security ISO 27001 PCI DSS SOC 2 Vulnerability Management

About the role

The Staff Product Security Engineer role at Aiven is based in Helsinki, Finland, with seniority listed as Lead to Principal. You will manage the bug bounty program, advise on security for new products, and collaborate with Identity and Access Management and Security Operations.

Work format

This is a full-time position with a hybrid work arrangement. The listed English level is C1.

Skills and tools

Vulnerability Management
Cloud Security
PCI DSS
ISO 27001
SOC 2

What to prepare

Prepare a vulnerability walkthrough covering triage, false positives, remediation validation, and scanning coverage.
Choose an example showing how your security testing documentation supported compliance or an audit.

Responsibilities

Analyze vulnerability scanner results, document false positives, and identify gaps in scanning coverage.
Review internal network scans and coordinate vulnerability prioritization, remediation, and escalation.
Test product security using manual and tool-based methods, documenting findings and testing methodologies.
Triage reported vulnerabilities, check reproducibility, and validate engineering fixes.
Prepare vulnerability scanning documentation for PCI DSS, ISO 27001, and SOC 2 compliance.
Support third-party audits and penetration tests, including responses to audit questions.
Help automate identity and access management procedures and reporting.
Assess the security of artificial intelligence algorithms in Aiven products.

Requirements

5+ years of experience in information security or a related field.
A bachelor's or master's degree in a relevant computing, engineering, or security discipline, or equivalent training.
Knowledge of security, distributed systems, and microservices architecture.
Understanding of risk management, vulnerability management, and cloud security in multi-cloud environments.
Experience with public cloud, networking, programming, and software development.
Senior certifications in hyperscaler clouds and security testing.

Nice to have

Risk management certifications are beneficial, alongside experience in risk management.
Experience in site reliability engineering, IT architecture, business analysis, or project management is an asset.

Apply for this role

Send a short intro — the hiring team will review and respond.

Create candidate account Log in

Aiven

Product

Helsinki-headquartered managed open source data platform offering PostgreSQL, Apache Kafka, ClickHouse, OpenSearch and Valkey as a service across the major clouds. Most engineering roles are based at

Location: Helsinki, Finland
Team size: 201-500
Remote policy: Hybrid

View company profile