Commerce Tools

3 weeks ago

Principal Engineer, Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Own product security strategy and help engineering teams “shift left” to build secure services on multi-cloud infrastructure. You’ll assess and raise security maturity, define standardized security architecture and operational best practices, and drive remediation of security and technology risks. Partner with product, principal engineers, and legal/compliance teams to influence requirements, support penetration-test reviews, and lead/enable customer conversations about product security.

Location: Berlin, London

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Formulate, evangelise, and drive adoption of the product security strategy.
•Assess, advise on, and increase the security maturity posture.
•Create standardized security architecture and operational best practices, embedding security tooling into the development process.
•Track and drive remediation of security and technology risks, triaging and investigating new attack vectors.
•Educate product teams on risk assessments, threat modeling, and building secure API-first applications, and contribute to penetration test reviews.

Pay and Benefits

Equity and Bonus:Equity

Perks:Health InsuranceLearning BudgetParental LeaveEquity

Key Requirements

•5+ years of hands-on Product Security experience with a proven track record.
•2+ years improving Product Security in a leadership role.
•Experience with secure architecture design reviews and threat modeling.
•Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, APIs, and web application security.
•Practical DevSecOps experience and proficiency in at least one scripting language (JavaScript or Go).

Experience:5+ yearsProduct securityDevSecOps

Skills:Creative problem-solvingRisk awarenessCommunicationKnowledge sharingTeamworkLeadership

Certifications:CISSPCCSPCertified Kubernetes Security SpecialistGCP security certificationAWS security certificationAzure security certification

Languages:English

Tech Stack:LinuxKubernetesTerraformVaultAPIWeb application securityDevSecOpsJavaScriptGo

Company Brief

Commerce Tools

Provides a frontend-as-a-service platform for headless commerce, enabling teams to build, deploy, and manage composable storefronts. Integrates with commercetools and other backend services to deliver omnichannel customer experiences.

Industry: SaaS

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Headquarters: Berlin, Germany

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Commerce Tools

3 weeks ago

Principal Engineer, Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Location: Berlin, London

Workplace: Hybrid

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Sr. Manager level

Key Responsibilities

•Formulate, evangelise, and drive adoption of the product security strategy.
•Assess, advise on, and increase the security maturity posture.
•Create standardized security architecture and operational best practices, embedding security tooling into the development process.
•Track and drive remediation of security and technology risks, triaging and investigating new attack vectors.
•Educate product teams on risk assessments, threat modeling, and building secure API-first applications, and contribute to penetration test reviews.

Pay and Benefits

Equity and Bonus:Equity

Perks:Health InsuranceLearning BudgetParental LeaveEquity

Key Requirements

•5+ years of hands-on Product Security experience with a proven track record.
•2+ years improving Product Security in a leadership role.
•Experience with secure architecture design reviews and threat modeling.
•Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, APIs, and web application security.
•Practical DevSecOps experience and proficiency in at least one scripting language (JavaScript or Go).

Experience:5+ yearsProduct securityDevSecOps

Skills:Creative problem-solvingRisk awarenessCommunicationKnowledge sharingTeamworkLeadership

Certifications:CISSPCCSPCertified Kubernetes Security SpecialistGCP security certificationAWS security certificationAzure security certification

Languages:English

Tech Stack:LinuxKubernetesTerraformVaultAPIWeb application securityDevSecOpsJavaScriptGo

Company Brief

Commerce Tools

Industry: SaaS

Company Size: Medium (51 to 250 employees)

Growth: Growth Stage Startup

Headquarters: Berlin, Germany

Website LinkedIn