Principal Engineer, Product Security
commercetools2 months ago
Valencia, SpainStaff+
Responsibilities
- Formulate, evangelize, and drive adoption of the product security strategy.
- Assess and improve security maturity, architecture, operational practices, and risk remediation.
- Educate product teams on risk assessments, threat modeling, and secure API-first application development.
- Review requirements and designs, conduct secure code and architecture reviews, and embed security tooling into the development process.
- Review external penetration tests, investigate attack vectors, and help prioritize and mitigate security issues.
- Collaborate with product teams, Product Management, Principal Engineers, legal, and compliance teams to improve security.
- Facilitate customer conversations regarding product security.
- Drive security and quality initiatives, support certification audits, identify skills gaps, and facilitate knowledge sharing and training.
Requirements
- 5+ years of hands-on Product Security experience.
- 2+ years of experience improving Product Security in a leadership role.
- Experience with customer-facing security roles, roadmap influence, matrix organizations, and scale-up environments.
- Experience with secure architecture design reviews, threat modeling, secure SDLC practices, static analysis, and secure code review implementations.
- Knowledge of Linux systems, Kubernetes, Terraform, Vault, API security, and web application security.
- Practical DevSecOps experience and proficiency in at least one scripting language such as JavaScript or Go.
- Project management experience for projects affecting multiple teams.
- Experience running trainings or onboardings and working in an Agile, customer-focused environment.
- Fluent written and verbal English communication.
- Preferred qualifications include security certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP, AWS, or Azure security certifications.
- Curiosity about using AI tools and willingness to learn new technologies and leadership practices.
Benefits
- Comprehensive health benefits for employees and dependents, including personalized mental health support through OpenUp.
- Annual learning budget, self-paced learning platforms, language training, personalized coaching, mentorship, and leadership programs.
- Additional fully paid parental leave through Family Leave Plus.
- Equity participation program.
- Hybrid work arrangement with three days per week in the Berlin, London, or Valencia office.
Categories