Product Security Engineer

About the role

You will empower engineering teams to design and build secure software across a diverse product portfolio, including Generative AI (GenAI), Large Language Models (LLM), microservice architecture, and mobile applications. Your work will help deliver robust security for every feature and service provided to customers.

What you'll do

• Apply your knowledge of security architecture to help software engineers build secure products and services across a diverse technology stack, including microservices, mobile applications, and cutting-edge AI-driven solutions.
• Collaborate closely with engineering teams to understand their application security needs, including those related to emerging technologies like Generative AI (GenAI) and Large Language Models (LLM).
• Perform application security design reviews, threat modeling, and code reviews, ensuring security principles are embedded in every stage of the development lifecycle.
• Use your penetration testing skills to assess and strengthen the security of internal and external applications and services, including AI-powered features and traditional systems.
• Develop tooling to support the Secure Software Development Lifecycle (SSDLC) and other security initiatives across diverse product environments.
• Build automation frameworks to enable engineering teams to deliver secure features efficiently, whether for AI solutions or traditional applications.
• Educate engineering teams and security champions on secure coding and development practices, including security considerations unique to AI and data governance.
• Enable engineering teams to identify and remediate vulnerabilities before they reach production, with a focus on both general application security and AI-specific risks.

What you'll need

• Proficiency in software engineering with one or more general-purpose programming languages (e.g., Python, Go, or similar).
• Experience with threat modeling, security testing, and analyzing applications, including those involving emerging technologies like Generative AI (GenAI) and Large Language Models (LLM).
• Prior experience in building automation to support the Secure Software Development Lifecycle (SSDLC).
• Proven ability to collaborate closely with engineering teams, supporting them throughout the Software Development Lifecycle (SDLC).
• Deep technical knowledge in one or more areas: cloud and networking security, web application security, mobile security, or security challenges unique to AI-driven products and data governance.
• Strong understanding of microservice architectures and working with scalable software in the cloud.
• Familiarity with static/dynamic code analysis, fuzzing, and other techniques to identify security vulnerabilities.
• Solid knowledge of secure coding best practices and security standards, including the OWASP Top 10.

What they offer

• Competitive personal development budget, work from home budget, and wellness memberships
• Hybrid work: two dedicated office days per week, flexible remote work for the rest
• Premium N26 bank account subscription and access for friends and family
• Additional day of annual leave for each year of service
• High degree of autonomy and access to cutting-edge technologies
• Relocation package with visa support