Sr Product Security Engineer | Remote | Europe

n8n GmbH; Österreich; On-site; EUR 90,000 - 130,000; Full time

Job summary

n8n GmbH is strengthening its security posture by embedding threat modelling and risk assessments across product features, AI agents, cloud infrastructure, and internal systems. The team partners with Engineering, Cloud, IT, and Data to translate security requirements into concrete designs, while enabling secure development through tooling and practices.

The security function focuses on proactive defense, incident readiness, and scalable processes to protect the platform and customers as we grow.

Qualifications

• Experience with threat modelling and risk assessments across product features and data systems.
• Ability to collaborate with Engineering, Cloud, IT, and Data teams.
• Experience embedding security into development processes and guiding secure coding practices.

Responsibilities

• Perform threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems.
• Review security designs with Engineering, Cloud, IT and Data teams, defining actionable security requirements.
• Provide secure coding guidance, design reviews, documentation, and security tooling to help teams identify and address risks.
• Improve logging, detection, and protective monitoring across infrastructure and internal applications.
• Develop and improve incident response processes, runbooks, and exercises to strengthen detection, investigation, and response.

Skills

Threat modelling

Security design

Security tooling

Cross-functional collaboration

Job description

The AI orchestration of your wildest imagination.

n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact.

Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve:

• Cultivated a community of more than 650,000 active developers and builders
• Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects
• Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation

That’s the company we’ve built. Now we’d love to see what you can build.

We’re in a defining moment of an incredible journey. Come and build with us.

Your main goal will be to identify and reduce security risks across n8n's product and internal systems.

Using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems.

You’ll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You’ll help us move from reactive security management to a proactive, scalable security practice.

Here’s what you’ll be driving:

Threat Modelling, Risk Assessment & Security Design

• Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations.
• Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls.
• Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently.

Security Operations & Incident Readiness

• Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications.
• Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents.
• Work closely