Product Security Expert
99x ·
- Work mode
- Remote
- Employment
- Full time
- Experience
- 1+ years
Remote product security engineer who triages vulnerability findings from ASPM/SAST/SCA/CSPM tools, performs risk-based and exploratory testing, and builds/maintains automated test suites using Playwright (TypeScript) and Selenium (C#) on Azure cloud platforms.
This is a remote position.
We are looking for a Product Security Engineer to join our team and support vulnerability triage, risk-based testing, and test automation initiatives across modern cloud-based platforms.
In this role, you will focus on identifying, classifying, and validating security findings while contributing to a robust testing strategy and automation framework. You will work closely with internal teams using asynchronous communication and apply both analytical and exploratory approaches to ensure high-quality software delivery.
The role combines application security, vulnerability assessment, and quality assurance, with a strong focus on structured analysis, automation, and cloud environments.
Responsibilities:
- Developing and establishing the Secure Software Development Lifecycle within the company
- Advising internal product teams on secure software development
- Conducting penetration tests and code reviews
- (Further) developing the internal application security toolchain
Requirements:
- Completed degree in Computer Science or comparable education
- At least 3 years of full-time experience in penetration testing, with a focus on web pentesting
- At least 1-2 years of experience in web development, to assess vulnerabilities in the context of real-world development practices
- Know-how of common tools (e.g., Burp Suite)
- Comprehensive knowledge of web technologies and cloud environments (e.g., Azure)
- Ideally, security certifications with a focus on web, such as OSWE, CWES, CWEE, or comparable
- Experience using AI for code analysis or security automation
- Motivated, ambitious, and able to work independently
- Analytical thinking and enjoyment of solving complex technical challenges
- Confident demeanor toward internal stakeholders, a strong service orientation, and enjoyment of collaborative advisory work
- Strong communication and presentation skills to convey complex technical topics in a way that's clear and tailored to the audience
- Business fluent English skills
If this sounds like you, share your CV with us and let’s talk.