Product Security Expert

This is a remote position.

We are looking for a Product Security Engineer to join our team and support vulnerability triage, risk-based testing, and test automation initiatives across modern cloud-based platforms.

In this role, you will focus on identifying, classifying, and validating security findings while contributing to a robust testing strategy and automation framework. You will work closely with internal teams using asynchronous communication and apply both analytical and exploratory approaches to ensure high-quality software delivery.

The role combines application security, vulnerability assessment, and quality assurance, with a strong focus on structured analysis, automation, and cloud environments.

Responsibilities:

• Developing and establishing the Secure Software Development Lifecycle within the company
  
• Advising internal product teams on secure software development
  
• Conducting penetration tests and code reviews
  
• (Further) developing the internal application security toolchain
  

Requirements:

• Completed degree in Computer Science or comparable education
  
• At least 3 years of full-time experience in penetration testing, with a focus on web pentesting
  
• At least 1-2 years of experience in web development, to assess vulnerabilities in the context of real-world development practices
  
• Know-how of common tools (e.g., Burp Suite)
  
• Comprehensive knowledge of web technologies and cloud environments (e.g., Azure)
  
• Ideally, security certifications with a focus on web, such as OSWE, CWES, CWEE, or comparable
  
• Experience using AI for code analysis or security automation
  
• Motivated, ambitious, and able to work independently
  
• Analytical thinking and enjoyment of solving complex technical challenges
  
• Confident demeanor toward internal stakeholders, a strong service orientation, and enjoyment of collaborative advisory work
  
• Strong communication and presentation skills to convey complex technical topics in a way that's clear and tailored to the audience
  
• Business fluent English skills
  

If this sounds like you, share your CV with us and let’s talk.