Principal Engineer, Product Security

Commerce Tools
Berlin, London
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Problem-solving","Collaboration","Communication","Leadership","Continuous improvement"]

Drive product security strategy and help the engineering organization “shift left” to build secure services on multi-cloud infrastructure. Create standardized security architecture and operational best practices, assess and advise on security maturity, and track remediation of security and technology risks. Lead threat modeling and secure architecture design reviews, educate product teams on risk assessments for API-first applications, and contribute to external penetration test reviews and customer security conversations.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Commerce Tools
Commerce Tools
2 months ago

Principal Engineer, Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live
Reposted: similar role first listed 2 months ago

Job Summary

Drive product security strategy and help the engineering organization “shift left” to build secure services on multi-cloud infrastructure. Create standardized security architecture and operational best practices, assess and advise on security maturity, and track remediation of security and technology risks. Lead threat modeling and secure architecture design reviews, educate product teams on risk assessments for API-first applications, and contribute to external penetration test reviews and customer security conversations.
Location: Berlin, London
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Formulate, evangelise, and drive adoption of the product security strategy with the engineering team.
  • •Assess and advise on security maturity posture; create standardized security architecture and operational best practices.
  • •Help track and drive remediation of security and technology risks, including triaging new attack vectors.
  • •Educate product teams on risk assessments, threat modeling, and building secure API-first applications.
  • •Review requirements/designs, embed security tooling into the development process, and support external penetration test reviews and certification audits.

Pay and Benefits

Perks:Health InsuranceLearning BudgetParental LeaveEquity

Key Requirements

  • •5+ years of hands-on Product Security experience with a proven track record.
  • •2+ years improving Product Security in a leadership role.
  • •Experience with customer-facing security roles and influencing roadmaps in matrix organizations.
  • •Expertise in secure architecture design reviews and threat modeling, including embedding security across the SDLC.
  • •Sound knowledge of Linux systems and security tooling, plus practical DevSecOps experience and scripting proficiency (JavaScript or Go).
Experience:5+ yearsProduct securityMulti-cloudDevSecOpsAgile
Skills:Problem-solvingCollaborationCommunicationLeadershipContinuous improvement
Certifications:CISSPCCSPCertified Kubernetes Security SpecialistGCP security certificationAWS security certificationAzure security certification
Languages:English
Tech Stack:LinuxKubernetesTerraformVaultAPIWeb application securityDevSecOpsJavaScriptGo

Company Brief

Commerce Tools
Provides a frontend-as-a-service platform for headless commerce, enabling teams to build, deploy, and manage composable storefronts. Integrates with commercetools and other backend services to deliver omnichannel customer experiences.
Industry: SaaS
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Berlin, Germany
WebsiteLinkedIn