Principal Engineer, Product Security (m/f/x)

The role

You will support the Engineering team by solving technical problems and enabling teams to build secure services on multi-cloud infrastructure. You will drive product security strategy, create security architecture, and educate product teams on risk assessments and threat modelling.

What you will do

• Formulate, evangelise, and drive adoption of the product security strategy
• Assess, advise on, and increase the security maturity posture
• Create a standardised security architecture and operational best practices
• Help track and drive remediation of security and technology risks
• Educate product teams on risk assessments, threat modelling, and building secure api-first applications
• Review requirements and designs to help product teams address shortcomings
• Embed security tooling into the development process
• Contribute to the review of external penetration tests and help teams prioritise fixes
• Collaborate with product teams to improve overall security and resolve specific issues
• Facilitate or lead customer conversations regarding product security

Required qualifications

• 5+ years of proven track record in hands-on Product Security
• 2+ years of experience improving Product Security in a leadership role
• Experience with customer-facing security roles and influencing roadmaps in matrix organizations
• Experience in a scale-up environment with ambitious and competing priorities
• Expertise in formulating, elaborating, and clarifying requirements or priorities
• Experience with Secure Architecture design reviews and Threat Modeling
• Experience infusing security into various levels of the SDLC
• Experience with Static Analysis and Secure Code Review implementations
• Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, API, and web application security
• Practical experience in DevSecOps and proficiency in at least one scripting language like JavaScript or Go
• Project management experience for projects affecting multiple teams
• Experience working within an Agile environment with a strong customer focus

Nice to have

• Security Certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certifications
• An eagerness to constantly improve and learn about leadership and new technologies

Benefits

• Comprehensive health benefits for you and your dependents, including access to OpenUp for personalized mental health support
• Learning and development opportunities including an annual learning budget, access to self-paced learning platforms and language training, personalized coaching, mentorship, and leadership programs
• Family Leave Plus gives you additional fully paid weeks of parental leave on top of government-provided leave
• Equity participation program

About the company

commercetools powers the next era of commerce for customers through AI-driven solutions and flexible commerce architecture. The company is a collective of builders, explorers, doers, makers, and problem-solvers.