Staff Product Security Engineer

Lead–Principal Hybrid Helsinki, Finland Full-time Опубликовано 2 месяца назад

Зарегистрируйтесь, чтобы откликнуться Войти

Навыки и стек

Skills

Cloud Security ISO 27001 PCI DSS SOC 2 Vulnerability Management

О роли

The Staff Product Security Engineer role at Aiven is based in Helsinki, Finland, with seniority listed as Lead to Principal. You will manage the bug bounty program, advise on security for new products, and collaborate with Identity and Access Management and Security Operations.

Work format

This is a full-time position with a hybrid work arrangement. The listed English level is C1.

Skills and tools

Vulnerability Management
Cloud Security
PCI DSS
ISO 27001
SOC 2

What to prepare

Prepare a vulnerability walkthrough covering triage, false positives, remediation validation, and scanning coverage.
Choose an example showing how your security testing documentation supported compliance or an audit.

Обязанности

Analyze vulnerability scanner results, document false positives, and identify gaps in scanning coverage.
Review internal network scans and coordinate vulnerability prioritization, remediation, and escalation.
Test product security using manual and tool-based methods, documenting findings and testing methodologies.
Triage reported vulnerabilities, check reproducibility, and validate engineering fixes.
Prepare vulnerability scanning documentation for PCI DSS, ISO 27001, and SOC 2 compliance.
Support third-party audits and penetration tests, including responses to audit questions.
Help automate identity and access management procedures and reporting.
Assess the security of artificial intelligence algorithms in Aiven products.

Требования

5+ years of experience in information security or a related field.
A bachelor's or master's degree in a relevant computing, engineering, or security discipline, or equivalent training.
Knowledge of security, distributed systems, and microservices architecture.
Understanding of risk management, vulnerability management, and cloud security in multi-cloud environments.
Experience with public cloud, networking, programming, and software development.
Senior certifications in hyperscaler clouds and security testing.

Nice to have

Risk management certifications are beneficial, alongside experience in risk management.
Experience in site reliability engineering, IT architecture, business analysis, or project management is an asset.

Откликнуться на вакансию

Отправьте короткое сообщение о себе — команда найма рассмотрит его и ответит.

Создать аккаунт кандидата Войти

Aiven

Product

Helsinki-headquartered managed open source data platform offering PostgreSQL, Apache Kafka, ClickHouse, OpenSearch and Valkey as a service across the major clouds. Most engineering roles are based at

Локация: Helsinki, Finland
Размер команды: 201-500
Формат работы: Hybrid

View company profile