Job
- Level
- Senior
- Job Field
- IT, Software, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Location
- Berlin
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you will develop secure architectures, educate product teams on security practices, drive the security strategy for cloud-based applications, and implement security tools within the development process.
Job Technologies
Your role in the team
- As our Principal Engineer Product Security, you'll support the Engineering team by solving challenging technical problems for an ambitious product and enabling teams to 'shift left' to build secure services on multi-cloud infrastructure.
- You will:
- Formulate, evangelise, and drive adoption of the product security strategy.
- Assess, advise on, and increase the security maturity posture.
- Create a standardised security architecture and operational best practices.
- Help track and drive remediation of security and technology risks.
- Educate product teams on risk assessments, threat modelling, and building secure API-first applications.
- Review requirements and designs to help product teams address shortcomings.
- Integrieren Sie Sicherheitstools in den Entwicklungsprozess.
- Contribute to the review of external penetration tests and help teams prioritise fixes.
- Zusammenarbeit mit Produktteams zur Verbesserung der allgemeinen Sicherheit und zur Lösung spezifischer Probleme.
- Facilitate or lead customer conversations regarding product security.
- Triage and investigate new attack vectors to determine risk mitigation.
- Drive security and quality initiatives across the organization and support certification audits.
- Collaborate with Product Management, Principal Engineers, and legal/compliance teams.
- Identify skills gaps and facilitate knowledge sharing across the organization.
This text has been machine translated. Show original
Our expectations of you
Qualifications
- You're a creative problem-solver who is wired to find solutions.
- You confidently dive into complex challenges and have a talent for making them simple for others.
- Your curiosity drives you to constantly grow and contribute to an environment of trust and teamwork.
- You bring:
- Expertise in formulating, elaborating, and clarifying requirements or priorities.
- Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, API, and web application security.
- Klare schriftliche und mündliche Kommunikation in fließendem Englisch.
- AI Aptitude: A genuine curiosity for using AI tools to work smarter and more effectively, paired with a drive to learn and put them into practice in your role.
- Nice to Have: Security certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certifications.
- A strong desire to continuously improve and learn about leadership and new technologies.
Experience
- A strong technical background and 5+ years of proven track record in hands-on Product Security.
- 2+ Jahre Erfahrung in der Verbesserung der Produktsicherheit in einer Führungsrolle.
- Experience with customer-facing security roles and influencing roadmaps in matrix organizations.
- Experience in a scale-up environment with ambitious and competing priorities.
- Experience with secure architecture design reviews and threat modeling.
- Experience infusing security into various levels of the SDLC.
- Experience with Static Analysis and Secure Code Review implementations.
- Practical experience in DevSecOps and proficiency in at least one scripting language like JavaScript or Go.
- Project management experience for projects affecting multiple teams.
- Experience working within an Agile environment with a strong customer focus.
- Experience in setting up and conducting training sessions or onboarding processes.
This text has been machine translated. Show original
What we offer
- This role is hybrid, with three days a week spent in our Berlin, London or Valencia office.
- Because work and life are connected, our benefits are too. We've designed them to give you the security, flexibility, and opportunities you need to focus on what matters most.
- Umfassende Gesundheitsleistungen für Sie und Ihre Angehörigen, einschließlich Zugang zu OpenUp für personalisierte Unterstützung im Bereich mentale Gesundheit.
- Learning and development opportunities including an annual learning budget, access to self-paced learning platforms and language training, personalized coaching, mentorship, and leadership programs.
- Family Leave Plus provides you with additional fully paid weeks of parental leave on top of government-provided leave, allowing you to spend more time with your new family member.
- Our equity participation program allows you to share in our success.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Topics You Will Work On
Job Locations
About Your Employer
commercetools GmbH
commercetools offers the world's leading platform for digital commerce, enabling you to create powerful, highly personalized shopping experiences while building a profitable, sustainable brand.
Description
- Founding Year
- 2006
- Language
- English
- Company Type
- Digital Agency
- Working Model
- Full Remote, Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Principal Engineer Product Security
- Location
- Berlin
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
- English Only
- English only required
