Senior Product Security Engineer (Cybersecurity)

TL;DR

Senior Product Security Engineer (Cybersecurity): Strengthening product security pipelines and automation for an AI-native Employee Experience Platform with an accent on security tooling and infrastructure. Focus on implementing AI for vulnerability detection, managing Kubernetes security, and developing secure CI/CD pipelines.

Location: Hybrid in Dresden, Germany

Company

A unicorn AI-native Employee Experience Platform providing internal communication solutions for over 2,000 customers globally.

What you will do

• Improve security automation and strengthen product security pipelines.
• Explore and implement AI for vulnerability detection and remediation.
• Enhance security services using software engineering solutions in languages like TypeScript, Go, or Python.
• Maintain the Web Application Firewall (WAF) ruleset and outbound e-mail security metrics.
• Manage security for Kubernetes infrastructure and CI/CD pipelines.
• Maintain a central HTML sanitization service written in TypeScript.

Requirements

• Practical knowledge of penetration testing, secure software development, and vulnerability management (SAST, DAST).
• Strong programming skills in one of: TypeScript, JavaScript, Kotlin, Java, Go, or Python.
• Experience with Unix and Kubernetes infrastructure, preferably managed via Terraform and Kustomize.
• Strong communication skills in English.

Culture & Benefits

• Competitive compensation including a Long Term Incentive Plan (LTIP).
• Flexible working models and hybrid options with a yearly flex work allowance of €1560.
• 31 vacation days per year, including fully paid Fridays off during August.
• Company pension scheme.
• One annual volunteer day for supporting social projects.