Principal Engineer, Product Security

Commerce Tools
Munich, Berlin, London
Workplace: HybridFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsSkills: ["Creative problem-solving","Leadership","Cross-team collaboration","Written and verbal communication","Customer focus"]

Lead the product security strategy and help engineering teams “shift left” to build secure services on multi-cloud infrastructure. Drive security maturity, standardised security architecture, and operational best practices, including remediation of security and technology risks. Review requirements and designs, embed security tooling into the SDLC, and educate teams on risk assessments, threat modeling, and API-first secure application development while supporting penetration test reviews and security audits.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Commerce Tools
Commerce Tools
2 months ago

Principal Engineer, Product Security

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live
Reposted: similar role first listed 7 months ago

Job Summary

Lead the product security strategy and help engineering teams “shift left” to build secure services on multi-cloud infrastructure. Drive security maturity, standardised security architecture, and operational best practices, including remediation of security and technology risks. Review requirements and designs, embed security tooling into the SDLC, and educate teams on risk assessments, threat modeling, and API-first secure application development while supporting penetration test reviews and security audits.
Location: Munich, Berlin, London
Workplace: Hybrid
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Sr. Manager level

Key Responsibilities

  • •Formulate, evangelise, and drive adoption of the product security strategy.
  • •Assess, advise on, and increase security maturity posture across the organization.
  • •Create standardised security architecture and operational best practices and embed security tooling into the development process.
  • •Track and drive remediation of security and technology risks, including review of requirements/designs and external penetration test findings.
  • •Educate product teams on risk assessments, threat modelling, and building secure API-first applications; collaborate with product management, principal engineers, and legal/compliance teams.

Pay and Benefits

Perks:Health InsuranceLearning BudgetParental LeaveEquity

Key Requirements

  • •5+ years of hands-on Product Security experience with a proven track record.
  • •2+ years improving Product Security in a leadership role.
  • •Experience with Secure Architecture design reviews and Threat Modeling.
  • •Knowledge of Linux systems, Kubernetes, Terraform, Vault, API, and web application security.
  • •Practical DevSecOps experience, including proficiency in at least one scripting language such as JavaScript or Go.
Experience:5+ years
Skills:Creative problem-solvingLeadershipCross-team collaborationWritten and verbal communicationCustomer focus
Languages:English
Tech Stack:LinuxKubernetesTerraformVaultAPIWeb application securityDevSecOpsJavaScriptGoStatic AnalysisThreat ModelingSecure Code ReviewSDLCAgile

Company Brief

Commerce Tools
Provides a frontend-as-a-service platform for headless commerce, enabling teams to build, deploy, and manage composable storefronts. Integrates with commercetools and other backend services to deliver omnichannel customer experiences.
Industry: SaaS
Company Size: Medium (51 to 250 employees)
Growth: Growth Stage Startup
Headquarters: Berlin, Germany
WebsiteLinkedIn