(Senior) Product Security Manager (m/f/x) onsite / remote in Germany

Scalable GmbH; Berlin; Hybrid; EUR 60.000 - 100.000; Vollzeit

Zusammenfassung

An innovative fintech startup is seeking a Senior Product Security Manager to lead their security initiatives. This role involves defining secure-by-design strategies, overseeing architecture reviews, and collaborating with engineering teams to ensure security is integrated throughout the development lifecycle. With a commitment to continuous learning and a diverse team, this position offers the chance to make a significant impact in the fintech space while working in a flexible environment. Join a company that values collaboration and integrity, and be part of shaping the future of digital investment.

Leistungen

Flexible vacation policy

Education budget

German language classes

Relocation support

Access to latest hardware

Monthly contribution for Jobticket

Complimentary Broker subscription

Qualifikationen

• 6+ years in application or product security, with 2 years in leadership.
• Proven experience in secure development lifecycle practices.
• Strong understanding of cloud architectures and offensive security.

Aufgaben

• Define and implement the product security roadmap and secure coding standards.
• Lead and mentor a multidisciplinary team of security experts.
• Coordinate vulnerability remediation efforts and provide updates.

Kenntnisse

Application Security

Product Security

Threat Modeling

Penetration Testing

Vulnerability Management

Cloud Architectures

CI/CD Pipelines

Leadership

Project Management

Stakeholder Communication

Ausbildung

Relevant Certifications (CISSP, CSSLP, OSWE/OSCP)

Tools

Security Playbooks

Automation Testing Tools

Jobbeschreibung

(Senior) Product Security Manager (m/f/x) onsite / remote in Germany

• Full-time

Scalable Capital is a leading digital investment platform in Europe, empowering individuals to shape their financial futures. Our services include Scalable Broker, which facilitates professional investment in stocks, ETFs, and other exchange-traded products; Scalable Wealth, a digital wealth management service; and the European Investor Exchange (EIX), a stock exchange for retail investors. With over 27 billion euros held on our platform by more than one million clients, we are a significant player in the fintech space.

Founded in 2014, we employ more than 500 people across Munich, Berlin, Vienna, and London. Our team, led by Erik Podzuweit and Florian Prucker, is dedicated to developing innovative financial services. We value collaboration, integrity, and continuous learning, guided by our company values, which you can learn more about here.

We are seeking an experienced security leader to develop and lead our Product Security program. As the Product Security Manager, you will define secure-by-design strategies for all customer-facing products, oversee architecture reviews and penetration testing, and collaborate closely with engineering and DevOps teams to embed security throughout the development lifecycle. Your responsibilities will include roadmap planning, team development, and cross-functional communication.

Key responsibilities

1. Define and implement the product security roadmap, including design reviews, threat modeling, penetration testing, secure coding standards, and automation testing.
2. Lead and mentor a multidisciplinary team of security experts.
3. Conduct risk assessments and facilitate threat modeling workshops.
4. Establish and maintain product security playbooks, review checklists, and engagement models for engineering teams.
5. Coordinate vulnerability remediation efforts, providing updates to product teams and leadership.
6. Serve as the main point of contact for product squads regarding security reviews and guidance.
7. Promote a security champion network through workshops and sharing best practices to embed security by design in the SDLC.
8. Ensure compliance with relevant regulations and industry standards.

Qualifications include:

• 6+ years of experience in application or product security, with at least 2 years in a leadership role.
• Proven experience in secure development lifecycle practices, threat modeling, penetration testing, and vulnerability management.
• Strong understanding of cloud and application architectures, CI/CD pipelines, and offensive security techniques.
• Hands-on skills in code review, threat modeling, and penetration testing.
• Excellent leadership, project management, and stakeholder communication skills.
• Ability to communicate risks effectively to both technical and non-technical audiences.
• Knowledge of threat modeling frameworks, secure coding standards, and compliance requirements.
• Relevant certifications such as CISSP, CSSLP, OSWE/OSCP are advantageous.

Benefits include:

• Be part of a rapidly growing and innovative fintech startup impacting customers' lives.
• Work with an international, diverse, and inclusive team.
• Option to work from our offices in Munich or Berlin, or remotely within Germany.
• Access to the latest hardware and tools.
• Opportunities for learning, including knowledge sharing sessions and an education budget.
• German language classes and relocation support.
• Flexible vacation policy and the possibility to work abroad.
• Competitive compensation and company pension scheme.
• Monthly contribution of 25% for the ‘Deutschland Jobticket’.
• Complimentary PRIME+ Broker subscription, with no order commissions.