Principal Engineer, Product Security (m/f/x)
<div class="ng-tns-c879422873-771">
<section id="processing-state-26" class="processing-state_container ng-tns-c879422873-771 is-gpi-avatar is-done-processing ng-trigger ng-trigger-processingStateShowHide ng-star-inserted">
<div id="processing-state-26-summary" class="processing-state_details ng-trigger ng-trigger-menuExpansion ng-tns-c879422873-771 is-gpi-avatar ng-star-inserted">
<h2>About Commercetools</h2>
</div>
</section>
</div>
<div class="response-content ng-tns-c263290053-769">
<div class="container">
<div id="model-response-message-contentr_bfb50fc8f1f4512c" class="markdown markdown-main-panel stronger enable-updated-hr-color">
<p data-path-to-node="1">Real innovation starts with a strong foundation, and at commercetools, that comes from the perfect balance of our product and our people. Behind every leap forward is a collective of builders, explorers, doers, makers, and problem-solvers. The kind of people who not only pioneered a more flexible approach to commerce architecture but also shaped the culture of experimentation that approach unlocked. Together they are the engine of commerce innovation today. At commercetools, we power the next era of commerce for our customers. Whether it’s AI-driven solutions that help enterprises make smarter business decisions, bridging digital and physical shopping experiences, or enabling entirely new ways for industries to connect with their customers, we help the world’s most ambitious companies experiment, scale, and grow without limits. Here the best idea wins, not the loudest voice. You will have the tools, trust, and space to not only build the future of commerce, but to build your own.</p>
<h2 data-path-to-node="2">Your Impact</h2>
<p data-path-to-node="3"><span data-path-to-node="3,1"><span class="citation-2853">As our </span><strong data-path-to-node="3,1" data-index-in-node="7"><span class="citation-2853">Principal Engineer Product Security</span></strong><span class="citation-2853"> </span></span><span data-path-to-node="3,4"><span class="citation-2852">, you’ll support the </span><strong data-path-to-node="3,4" data-index-in-node="21"><span class="citation-2852">Engineering team</span></strong><span class="citation-2852"> by solving challenging technical problems for an ambitious product and enabling teams to "shift left" to build secure services on multi-cloud infrastructure</span></span><span data-path-to-node="3,6">.</span></p>
<p> </p>
<p data-path-to-node="4"><strong data-path-to-node="4" data-index-in-node="0">You will:</strong></p>
<ul data-path-to-node="5">
<li>
<p data-path-to-node="5,0,0"><span data-path-to-node="5,0,0,1"><span class="citation-2851">Formulate, evangelise, and drive adoption of the product security strategy </span></span></p>
</li>
<li>
<p data-path-to-node="5,1,0"><span data-path-to-node="5,1,0,1"><span class="citation-2850">Assess, advise on, and increase the security maturity posture </span></span></p>
</li>
<li>
<p data-path-to-node="5,2,0"><span data-path-to-node="5,2,0,1"><span class="citation-2849">Create a standardised security architecture and operational best practices </span></span></p>
</li>
<li>
<p data-path-to-node="5,3,0"><span data-path-to-node="5,3,0,1"><span class="citation-2848">Help track and drive remediation of security and technology risks </span></span></p>
</li>
<li>
<p data-path-to-node="5,4,0"><span data-path-to-node="5,4,0,1"><span class="citation-2847">Educate product teams on risk assessments, threat modelling, and building secure api-first applications </span></span></p>
</li>
<li>
<p data-path-to-node="5,5,0"><span data-path-to-node="5,5,0,1"><span class="citation-2846">Review requirements and designs to help product teams address shortcomings </span></span></p>
</li>
<li>
<p data-path-to-node="5,6,0"><span data-path-to-node="5,6,0,1"><span class="citation-2845">Embed security tooling into the development process </span></span></p>
</li>
<li>
<p data-path-to-node="5,7,0"><span data-path-to-node="5,7,0,1"><span class="citation-2844">Contribute to the review of external penetration tests and help teams prioritise fixes </span></span></p>
</li>
<li>
<p data-path-to-node="5,8,0"><span data-path-to-node="5,8,0,1"><span class="citation-2843">Collaborate with product teams to improve overall security and resolve specific issues </span></span></p>
</li>
<li>
<p data-path-to-node="5,9,0"><span data-path-to-node="5,9,0,1"><span class="citation-2842">Facilitate or lead customer conversations regarding product security </span></span></p>
</li>
<li>
<p data-path-to-node="5,10,0"><span data-path-to-node="5,10,0,1"><span class="citation-2841">Triage and investigate new attack vectors to determine risk mitigation </span></span></p>
</li>
<li>
<p data-path-to-node="5,11,0"><span data-path-to-node="5,11,0,1"><span class="citation-2840">Drive security and quality initiatives across the organization and support certification audits </span></span></p>
</li>
<li>
<p data-path-to-node="5,12,0"><span data-path-to-node="5,12,0,1"><span class="citation-2839">Collaborate with Product Management, Principal Engineers, and legal/compliance teams </span></span></p>
</li>
<li>
<p data-path-to-node="5,13,0"><span data-path-to-node="5,13,0,1"><span class="citation-2838">Identify skills gaps and facilitate knowledge sharing across the organization </span></span></p>
</li>
</ul>
<p> </p>
<p data-path-to-node="6"><span data-path-to-node="6,1"><span class="citation-2837">This role is hybrid, with three days a week spent in our </span><strong data-path-to-node="6,1" data-index-in-node="57"><span class="citation-2837">Berlin, London or Valencia</span></strong><span class="citation-2837"> office</span></span><span data-path-to-node="6,3">.</span></p>
<p> </p>
<h2 data-path-to-node="7">What Sets You Apart</h2>
<p data-path-to-node="8">You're a creative problem-solver who is wired to find solutions. You confidently dive into complex challenges and have a talent for making them simple for others. Your curiosity drives you to constantly grow and contribute to an environment of trust and teamwork. Great ideas come from many paths, and your unique perspective matters more than checking every box. What matters most is the mindset you bring to the work.</p>
<p data-path-to-node="9"><strong data-path-to-node="9" data-index-in-node="0">You bring:</strong></p>
<ul data-path-to-node="10">
<li>
<p data-path-to-node="10,0,0"><span data-path-to-node="10,0,0,1"><span class="citation-2836">A strong technical background and 5+ years of proven track record in hands-on Product Security </span></span></p>
</li>
<li>
<p data-path-to-node="10,1,0"><span data-path-to-node="10,1,0,1"><span class="citation-2835">2+ years of experience improving Product Security in a leadership role </span></span></p>
</li>
<li>
<p data-path-to-node="10,2,0"><span data-path-to-node="10,2,0,1"><span class="citation-2834">Experience with customer-facing security roles and influencing roadmaps in matrix organizations </span></span></p>
</li>
<li>
<p data-path-to-node="10,3,0"><span data-path-to-node="10,3,0,1"><span class="citation-2833">Experience in a scale-up environment with ambitious and competing priorities </span></span></p>
</li>
<li>
<p data-path-to-node="10,4,0"><span data-path-to-node="10,4,0,1"><span class="citation-2832">Expertise in formulating, elaborating, and clarifying requirements or priorities </span></span></p>
</li>
<li>
<p data-path-to-node="10,5,0"><span data-path-to-node="10,5,0,1"><span class="citation-2831">Experience with Secure Architecture design reviews and Threat Modeling </span></span></p>
</li>
<li>
<p data-path-to-node="10,6,0"><span data-path-to-node="10,6,0,1"><span class="citation-2830">Experience infusing security into various levels of the SDLC </span></span></p>
</li>
<li>
<p data-path-to-node="10,7,0"><span data-path-to-node="10,7,0,1"><span class="citation-2829">Experience with Static Analysis and Secure Code Review implementations </span></span></p>
</li>
<li>
<p data-path-to-node="10,8,0"><span data-path-to-node="10,8,0,1"><span class="citation-2828">Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, API, and web application security </span></span></p>
</li>
<li>
<p data-path-to-node="10,9,0"><span data-path-to-node="10,9,0,1"><span class="citation-2827">Practical experience in DevSecOps and proficiency in at least one scripting language like JavaScript or Go </span></span></p>
</li>
<li>
<p data-path-to-node="10,10,0"><span data-path-to-node="10,10,0,1"><span class="citation-2826">Project management experience for projects affecting multiple teams </span></span></p>
</li>
<li>
<p data-path-to-node="10,11,0"><span data-path-to-node="10,11,0,1"><span class="citation-2825">Experience working within an Agile environment with a strong customer focus </span></span></p>
</li>
<li>
<p data-path-to-node="10,12,0"><span data-path-to-node="10,12,0,1"><span class="citation-2824">Experience setting up and running trainings or onboardings </span></span></p>
</li>
<li>
<p data-path-to-node="10,13,0"><span data-path-to-node="10,13,0,1"><span class="citation-2823">Clear written and verbal communication in fluent English </span></span></p>
<div class="source-inline-chip-container ng-star-inserted"> </div>
</li>
</ul>
<p data-path-to-node="11"><strong data-path-to-node="11" data-index-in-node="0">AI Aptitude:</strong> A genuine curiosity for using AI tools to work smarter and more effectively, paired with a drive to learn and put them into practice in your role.</p>
<p data-path-to-node="13"><span data-path-to-node="13,0"><strong data-path-to-node="13,0" data-index-in-node="0"><span class="citation-2822">Nice to Have:</span></strong><span class="citation-2822">
• Security Certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certifications </span></span></p>
<ul data-path-to-node="14">
<li>
<p data-path-to-node="14,0,0"><span data-path-to-node="14,0,0,1"><span class="citation-2821">An eagernes
Diese Anzeige stammt von Greenhouse. Originalanzeige ansehen ↗