Product Security Engineer

The Product Security team is looking for a Product Security Engineer to strengthen the security of products across the entire software development lifecycle. The focus of the role is security automation and tooling: embedding security checks into CI/CD pipelines, making them reliable and developer-friendly, and ensuring that identified risks are owned and remediated.

This is a hands-on engineering position with direct influence on how product security controls are designed, rolled out and maintained. The role involves close collaboration with AppSec, Cloud Security, DevOps, Platform and product engineering teams.

Responsibilities

• Integration and maintenance of SAST, SCA and secrets scanning across CI/CD pipelines and developer workflows
• Development of reusable security integrations and rules as code, including cloud configuration checks in collaboration with Cloud Security and DevOps
• Safe rollout of security controls together with pipeline owners and tracking of security coverage across products and pipelines
• Tuning of scanner rules and configurations to reduce false positives and provide actionable feedback to engineering teams, without masking real risks
• Troubleshooting of failed scans and broken integrations, timely restoration of controls and escalation of blockers
• Automation of the vulnerability management workflow: collection, deduplication, ticket creation and status tracking, ensuring every High finding has an owner and a due date
• Collaboration with AppSec and development teams on finding validation, remediation guidance and conversion of recurring issues into automated checks
• Proposals for new security gates, tools and improvements to exception handling
• Maintenance of runbooks, coverage reports and documentation, as well as knowledge sharing across teams

Requirements

• 3+ years of hands-on experience in DevSecOps, Product Security or Security Engineering roles
• Strong knowledge of Git workflows and CI/CD pipelines, including design of reusable integrations, investigation of failed jobs and assessment of change impact on delivery
• Practical experience configuring and tuning SAST, SCA and secrets scanning tools, as well as routing results to responsible teams
• Solid automation skills in Python, Bash, Go or a similar language, including API integrations
• Experience implementing security checks or policies as code, with version control, testing and controlled rollouts
• Hands-on experience securing and hardening environments across major cloud providers, including automated compliance checks
• Working knowledge of Linux and containerized build environments: permissions, credentials, logs
• Solid understanding of application, dependency and exposed-secret risks; ability to distinguish a tool failure from a security finding and identify cases requiring specialist review
• Strong ownership, problem-solving and cross-functional communication skills
• Intermediate English or higher
• Fluent Ukrainian

Nice to have

• Experience with AWS
• GitLab CI/CD security integrations
• Terraform or Kubernetes security checks
• Software supply-chain security: SBOMs, artifact signing, build provenance
• DAST integration or use of AI-assisted tools in security automation with appropriate review
• Background in fintech, trading, payments or other security-sensitive product environments

We offer

• 20 paid vacation days per year
• 10 paid sick leave days per year
• Public holidays as per the company's approved Public holiday list
• Medical budget
• Opportunity to work remotely
• Professional education budget
• Language learning budget
• Wellness budget (gym membership, sports gear and related expenses)