Senior Product Security Engineer

At Staffbase, security is at the heart of everything we build. As a Senior Product Security Engineer, you'll help keep our products and customer data secure while enabling engineering teams across the company. You'll get hands-on experience with modern security practices, mentorship from experienced engineers, and the chance to make a visible impact in a global SaaS environment.

What you'll do

• Take ownership of tasks that improve our security automation and strengthen our product security pipelines
• Proactively explore the use of AI for vulnerability detection and remediation
• Continuously learn and share knowledge about how vulnerabilities apply in our specific product context
• Support the team by enhancing our services with software engineering solutions
• Collaborate closely with stakeholders across the product department and gain broad exposure to how a growing SaaS company operates
• Maintain our outbound e-mail security by regularly reviewing the related metrics
• Maintain our Web Application Firewall ruleset
• Maintain our central HTML sanitization service written in TypeScript

What you'll need

• Practical knowledge of security topics (e.g. penetration testing, secure software development, vulnerability management, SAST, DAST)
• Strong programming skills, preferably one of the following: TypeScript, JavaScript, Kotlin, Java, Go, or Python
• Practical knowledge of Unix and Kubernetes infrastructure, preferably managed via Terraform and Kustomize
• Strong communication skills in English (German is a plus)

What they offer

• Competitive compensation including LTIP (unit-based Long Term Incentive Plan)
• Flexible working time models and hybrid work with yearly flex work allowance of €1560
• 31 vacation days annually plus pro rata fully paid Fridays off during August
• Company pension scheme
• One volunteer day per year for supporting a social project