Principal Engineer, Product Security
commercetools4 months ago
Valencia, SpainStaff+
Responsibilities
- Formulate, evangelize, and drive adoption of the product security strategy.
- Assess and improve security maturity, architecture, operational practices, and risk remediation.
- Educate product teams on risk assessments, threat modeling, and secure API-first application development.
- Review requirements and designs, conduct secure code and architecture reviews, and embed security tooling into the development process.
- Review external penetration tests, investigate attack vectors, and help prioritize and mitigate security issues.
- Collaborate with product teams, Product Management, Principal Engineers, legal, and compliance teams to improve security.
- Facilitate customer conversations regarding product security.
- Drive security and quality initiatives, support certification audits, identify skills gaps, and facilitate knowledge sharing and training.
Requirements
- 5+ years of hands-on Product Security experience.
- 2+ years of experience improving Product Security in a leadership role.
- Experience with customer-facing security roles, roadmap influence, matrix organizations, and scale-up environments.
- Experience with secure architecture design reviews, threat modeling, secure SDLC practices, static analysis, and secure code review implementations.
- Knowledge of Linux systems, Kubernetes, Terraform, Vault, API security, and web application security.
- Practical DevSecOps experience and proficiency in at least one scripting language such as JavaScript or Go.
- Project management experience for projects affecting multiple teams.
- Experience running trainings or onboardings and working in an Agile, customer-focused environment.
- Fluent written and verbal English communication.
- Preferred qualifications include security certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP, AWS, or Azure security certifications.
- Curiosity about using AI tools and willingness to learn new technologies and leadership practices.
Benefits
- Comprehensive health benefits for employees and dependents, including personalized mental health support through OpenUp.
- Annual learning budget, self-paced learning platforms, language training, personalized coaching, mentorship, and leadership programs.
- Additional fully paid parental leave through Family Leave Plus.
- Equity participation program.
- Hybrid work arrangement with three days per week in the Berlin, London, or Valencia office.
Categories
About commercetools
commercetools builds a cloud-native, API-first commerce platform used by enterprises to run B2C and B2B storefronts across channels. Its SaaS products provide headless commerce, catalog, checkout, and order management that developers integrate via microservices and SDKs, sold by subscription with enterprise support. Founded in 2010 and headquartered in Munich, it serves global brands; public references include Sephora, Volkswagen Group, NBCUniversal, and Danone.