Sr Security Engineer | Remote | Europe

Academic Key; Berlin; Hybrid; EUR 85,000 - 130,000; Full time

Job summary

n8n is seeking two Security Engineers to identify and reduce security risks across our product and internal systems. You will drive threat modelling, risk assessment, and security design in collaboration with Engineering, Cloud, IT, and Data teams to build a proactive security program.

You will help implement secure coding guidance, incident readiness, vulnerability management, and coordinated disclosure processes while supporting SOC 2 compliance and customer trust across our Berlin-based

Qualifications

• Hands-on experience with threat modelling and risk assessments across products and infra.
• Ability to validate findings, reproduce issues and automate security processes.

Responsibilities

• Perform threat modelling and risk assessments across product features, cloud infra, and data systems.
• Collaborate with Engineering, Cloud, IT, and Data teams to define actionable security requirements.
• Support SOC 2 compliance with automated evidence collection and continuous monitoring.
• Lead vulnerability management, incident readiness, and secure patch processes.

Skills

Threat modelling

Risk assessment

Security engineering

Secure coding guidance

Incident readiness

Tools

GitHub Security

Job description

The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: Cultivated a community of more than 650,000 active developers and builders Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register . We’re in a defining moment of an incredible journey. Come and build with us. Your main goal will be to identify and reduce security risks across n8n's product and internal systems , using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems. You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us build a move from reactive security management to a proactive, scalable security practice. Here's what you'll be driving: Threat Modelling, Risk Assessment & Security Design Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations. Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls. Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently. Vulnerability Management & Coordinated Disclosure Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact. Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes. Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories. Security Operations & Incident Readiness Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications. Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents. Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk. Customer Trust & Compliance Engineering Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations. Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests. Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers. We're hiring two Security Engineers with complementary strengths, so you don't need to be an expert in every security domain. REQUIREMENTS Must-haves Threat Modelling & Risk Assessment: You have hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement. Technical Security Expertise: You can validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes. Security Engineering Experience: You've worked hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured. Cross-functional Influence: You're comfortable acting as an internal security consultant, advising teams, challenging technical decisions