Principal Engineer, Product Security

Commerce Tools
Berlin, London
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Problem-solving","Collaboration","Communication","Knowledge sharing","Leadership"]

Drive and standardize product security across the engineering organization by shaping and evangelizing the security strategy, improving security maturity, and creating repeatable security architecture and operational practices. Partner with product teams to “shift left” on secure, API-first development, triage new attack vectors, review designs and requirements, and embed security tooling into the SDLC. Support customer security conversations and certification audits while improving teams through knowledge sharing and trainings.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Commerce Tools
Commerce Tools
2 months ago

Principal Engineer, Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 36 minutes agoStatus: Live
Reposted: similar role first listed 2 months ago

Job Summary

Drive and standardize product security across the engineering organization by shaping and evangelizing the security strategy, improving security maturity, and creating repeatable security architecture and operational practices. Partner with product teams to “shift left” on secure, API-first development, triage new attack vectors, review designs and requirements, and embed security tooling into the SDLC. Support customer security conversations and certification audits while improving teams through knowledge sharing and trainings.
Location: Berlin, London
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Formulate, evangelize, and drive adoption of the product security strategy across the engineering team.
  • •Assess and advise on security maturity, and create standardized security architecture and operational best practices.
  • •Help track and drive remediation of security and technology risks, triaging and investigating new attack vectors for risk mitigation.
  • •Educate product teams on risk assessments, threat modeling, and building secure API-first applications; review requirements and designs.
  • •Embed security tooling into the development process, contribute to external penetration test reviews, and support certification audits and customer security conversations.

Pay and Benefits

Equity and Bonus:Equity
Perks:Health InsuranceLearning BudgetParental LeaveEquity

Key Requirements

  • •5+ years of proven hands-on Product Security experience with a strong technical background.
  • •2+ years improving Product Security in a leadership role.
  • •Experience with secure architecture design reviews and threat modeling, including influencing roadmaps in matrix organizations.
  • •Strong knowledge of Linux systems, Kubernetes, Terraform, Vault, APIs, and web application security.
  • •Practical DevSecOps experience and proficiency in at least one scripting language such as JavaScript or Go, with clear written and verbal communication in English.
Experience:5+ years
Skills:Problem-solvingCollaborationCommunicationKnowledge sharingLeadership
Certifications:CISSPCCSPCertified Kubernetes Security SpecialistGCP security certificationAWS security certificationAzure security certification
Languages:English
Tech Stack:LinuxKubernetesTerraformVaultAPIWeb application securityDevSecOpsSDLCStatic analysisSecure code reviewJavaScriptGo

Company Brief

Commerce Tools
Provides a frontend-as-a-service platform for headless commerce, enabling teams to build, deploy, and manage composable storefronts. Integrates with commercetools and other backend services to deliver omnichannel customer experiences.
Industry: SaaS
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Berlin, Germany
WebsiteLinkedIn