Product Security Engineer (Cybersecurity)

TL;DR

Product Security Engineer (Cybersecurity): Leading the product security function to ensure privacy-focused applications remain secure with an accent on architecture, policy design, and automated security workflows. Focus on building a high-performing security team, managing bug bounty programs, and embedding security-by-design across a complex, open-source-driven product ecosystem.

Location: Hybrid role with offices in Geneva, Zurich, Prague, Barcelona, Paris, London, Vilnius, Skopje, and Taipei. Requires 3 days per week in the office, with up to 30% remote work flexibility.

Company

Proton is a community-first, profitable technology company founded by CERN scientists, dedicated to providing privacy-focused, open-source tools like Mail, VPN, and Drive to over 100 million users worldwide.

What you will do

• Define the vision and roadmap for product security across the entire organization.
• Build and lead a high-impact product security team.
• Partner with product managers and developers to architect secure products from the design phase.
• Design developer-friendly security guidelines and automated workflows to maintain high shipping velocity.
• Lead the bug bounty program to leverage the global security community.
• Serve as the primary point of contact for product security strategy and remediation.

Requirements

• 10+ years of experience in application security, specifically within SaaS or privacy-focused environments.
• Proven track record of leading complex security projects from concept to production.
• Hands-on experience with code reviews, penetration testing, and security tooling.
• Strong ability to translate technical security details into actionable guidance for diverse audiences.
• Experience defining and executing remediation plans for large, complex systems.
• Leadership style that balances constructive challenge with effective collaboration.

Nice to have

• Experience with B2B product security features.
• Knowledge of infrastructure security including hardware, networking, OS, and file systems.
• Experience with cryptographic protocols or prior work at privacy-centric organizations.
• Experience utilizing open-source code at scale.

Culture & Benefits

• Ownership through company stock options for all employees.
• Flexible working hours aligned with team collaboration needs.
• Comprehensive health insurance, retirement savings, and generous leave policies.
• Continuous learning support including training programs and conference attendance.
• Daily provided lunches and snacks at office locations.
• Subsidized transport, bike allowances, or parking based on location.