Principal Engineer, Product Security

Commerce Tools
Berlin, London
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Creative problem-solving","Risk awareness","Communication","Knowledge sharing","Teamwork","Leadership"]

Own product security strategy and help engineering teams “shift left” to build secure services on multi-cloud infrastructure. You’ll assess and raise security maturity, define standardized security architecture and operational best practices, and drive remediation of security and technology risks. Partner with product, principal engineers, and legal/compliance teams to influence requirements, support penetration-test reviews, and lead/enable customer conversations about product security.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Commerce Tools
Commerce Tools
2 months ago

Principal Engineer, Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Own product security strategy and help engineering teams “shift left” to build secure services on multi-cloud infrastructure. You’ll assess and raise security maturity, define standardized security architecture and operational best practices, and drive remediation of security and technology risks. Partner with product, principal engineers, and legal/compliance teams to influence requirements, support penetration-test reviews, and lead/enable customer conversations about product security.
Location: Berlin, London
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Formulate, evangelise, and drive adoption of the product security strategy.
  • •Assess, advise on, and increase the security maturity posture.
  • •Create standardized security architecture and operational best practices, embedding security tooling into the development process.
  • •Track and drive remediation of security and technology risks, triaging and investigating new attack vectors.
  • •Educate product teams on risk assessments, threat modeling, and building secure API-first applications, and contribute to penetration test reviews.

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceLearning BudgetParental LeaveEquity

Key Requirements

  • •5+ years of hands-on Product Security experience with a proven track record.
  • •2+ years improving Product Security in a leadership role.
  • •Experience with secure architecture design reviews and threat modeling.
  • •Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, APIs, and web application security.
  • •Practical DevSecOps experience and proficiency in at least one scripting language (JavaScript or Go).
Experience:5+ yearsProduct securityDevSecOps
Skills:Creative problem-solvingRisk awarenessCommunicationKnowledge sharingTeamworkLeadership
Certifications:CISSPCCSPCertified Kubernetes Security SpecialistGCP security certificationAWS security certificationAzure security certification
Languages:English
Tech Stack:LinuxKubernetesTerraformVaultAPIWeb application securityDevSecOpsJavaScriptGo

Company Brief

Commerce Tools
Provides a frontend-as-a-service platform for headless commerce, enabling teams to build, deploy, and manage composable storefronts. Integrates with commercetools and other backend services to deliver omnichannel customer experiences.
Industry: SaaS
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Berlin, Germany
WebsiteLinkedIn