Product Security Engineer - Lead Secure Access Initiatives

Traka (Assa Abloy); Österreich; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Meal allowance

Job bike leasing program

Transport subsidy

Extra vacation days

Sustainability: EV charging

Global collaboration

Professional growth opportunities

Job summary

SKIDATA is seeking a Product Security Engineer to drive vulnerability management, secure coding practices, and security testing within a collaborative Platform team. You will lead a securityCircle with architects and champions, stay ahead with new technologies, and contribute to the evolution of our access solutions.

The role requires strong knowledge of OWASP, ISO/NIST/PCI DSS, DevOps, and cloud/Docker/microservices, plus fluent English and teamwork in a hybrid setup.

Qualifications

• Must implement secure coding practices and use code analysis tools.
• Strong threat modeling expertise for secure design.
• Hands-on penetration testing experience.
• Familiar with OWASP principles and ISO27001/NIST/PCI DSS standards.
• Knowledge of DevOps practices and tooling.
• Proficient in Java, C#, or .NET.
• Experience with cloud services, Docker, and microservices.
• Good understanding of software architecture and IAM.
• Fluent written and spoken English.

Responsibilities

• Lead Product Security Initiatives: manage vulnerability processes with dev teams.
• Champion Secure Development: promote secure coding across the org.
• Drive Security Testing: coordinate internal/external pen tests.
• Lead the SW-Security Circle: guide security champions across areas.
• Explore New Technologies: research and adopt latest tools/methods.

Skills

Secure coding practices

Threat modeling

Penetration testing

OWASP & security standards

DevOps practices

Java/C#/NET

Cloud services / Docker / microserv.

Software architecture

Identity & access management

English proficiency

Job description

SKIDATA is seeking a Product Security Engineer to drive vulnerability management, secure coding practices, and security testing within a collaborative Platform team. You will lead a securityCircle with architects and champions, stay ahead with new technologies, and contribute to the evolution of our access solutions.

The role requires strong knowledge of OWASP, ISO/NIST/PCI DSS, DevOps, and cloud/Docker/microservices, plus fluent English and teamwork in a hybrid setup.