Head of Product Security Engineer (Cybersecurity)

TL;DR

Head of Product Security Engineer (Cybersecurity): Building and operating product security frameworks for a B2B SaaS workforce management platform with an accent on secure development, threat modeling, compliance, and AI security. Focus on embedding security controls across the product lifecycle, designing continuous testing practices, and translating regulatory requirements into effective engineering measures.

Location: Munich, Germany, with hybrid work and remote options within the EU.

Company

hirify.global is a German public technology company and market leader in workforce management software, operating a high-growth B2B SaaS business.

What you will do

• Establish and improve Secure SDLC and DevSecOps practices, including threat modeling, architecture reviews, code reviews, vulnerability management, and product incident response.
• Build and operate security testing frameworks for regular, occasional, and continuous testing, while monitoring product-related threat intelligence.
• Embed controls for the Cyber Resilience Act, EU AI Act, GDPR, ISO 27001, and SOC 2 into development workflows and maintain audit-ready evidence such as SBOMs.
• Partner with engineering teams on secure AI adoption, including model security, data ingestion, and monitoring of AI-specific attack vectors.
• Serve as the primary product security contact for presales, auditors, customers, and security incidents.
• Collaborate with Legal, Information Security, Infrastructure Compliance, IT, Cloud Operations, and Product Management, while mentoring security champions across engineering.

Requirements

• Degree in computer science, information security, or a related field; a Master’s or PhD is preferred.
• At least 5 years of experience in product security, application security, or secure software development, including secure coding and cloud architectures.
• Experience building and operationalizing security frameworks and controls across complex product environments.
• Strong understanding of regulatory and certification requirements and the ability to translate them into concrete product measures.
• Excellent, negotiation-ready English for communication with technical and non-technical stakeholders.
• Remote work is available only within the EU; the role supports a hybrid setup.

Culture & Benefits

• Profit-sharing and an employee stock program.
• Structured onboarding, Expert and Leadership Tracks, and access to hirify.global Academy.
• Hybrid work options, 30 days of vacation, and a strong diversity and inclusion focus.
• Company events, team retreats, and an in-house barista.
• Regular check-ups, corporate wellness programs, and Wellhub membership.
• Public-company stability with listings on SDAX and TecDAX.