1 day ago
Berlin, GermanySenior
Responsibilities
- Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems.
- Review security designs with Engineering, Cloud, IT, and Data teams and define actionable security requirements and controls.
- Develop secure coding guidance, design reviews, documentation, and security tooling that help teams identify and remediate risks.
- Improve logging, detection, protective monitoring, incident-response processes, runbooks, and security exercises.
- Participate in vulnerability triage, validate findings, coordinate remediation, verify fixes, and support secure patch and release processes.
- Help manage bug bounty and coordinated vulnerability disclosure programs, including security researcher engagement and GitHub Security Advisories.
- Support SOC 2 compliance through continuous control monitoring, automated evidence collection, and technical security controls.
- Collaborate with customer-facing and corporate functions on security assessments, policies, controls, and reusable trust resources.
Requirements
- Hands-on experience assessing real-world systems, identifying security risks, determining severity, and recommending practical controls.
- Ability to validate findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed.
- Hands-on infrastructure, product, or application security experience in a product-focused organization.
- Experience influencing cross-functional stakeholders and securing systems without directly owning them.
- Strong understanding of AI and LLM-assisted tooling, including limitations, security implications, and failure modes.
- Clear communication skills for documenting technical findings and explaining risks to technical and non-technical stakeholders.
- Deep expertise in at least two of application security, platform security, corporate security, security monitoring, or security assurance and compliance.
- Preferred qualifications include vulnerability disclosure or bug bounty experience, AI and agent security, familiarity with Okta, Azure, or Drata, open-source experience, penetration testing, and early-stage security experience.
Benefits
- Remote-first work across Europe with regular off-sites for team bonding.
- Europe-based employees receive 30 vacation days plus local public holidays, with country-specific health, pension, and financial-security benefits.
- Equity ownership, competitive compensation, and a €1K annual learning budget for courses, books, events, or coaching.
- €100 per month to support open-source projects.
- Regular hackathons, career growth opportunities, and a transparent working environment.
Tech Stack
Categories
About n8n
n8n builds a workflow automation and orchestration platform that blends no-code with the option to write code, aimed at developers and technical teams. The product is open-source under a fair-code license and can be self-hosted or used as a managed cloud service, with paid enterprise features and support. Founded in 2019 and headquartered in Berlin, the privately held company offers 500+ prebuilt integrations and API connectivity.