Remote Product Security Engineer – Secure SaaS & Automate

Action1; España; Presencial; EUR 70.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Fully remote work

High ownership

Cross-functional collaboration

Hands-on security product

Growth opportunities

Descripción de la vacante

Action1 is seeking a Product Security Engineer to join the team responsible for securing Action1's multi‑tenant SaaS product. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable.

This is a hands‑on role for someone who understands both software engineering and cybersecurity, enjoys working directly with

Formación

• 3+ years in product security, application security, DevSecOps, or a related field.
• Strong software engineering background with ability to work with engineering teams.
• Understanding of application, API, infrastructure, and software supply chain risks.
• Experience with cloud security concepts and practices.
• Knowledge of IAM, network security, logging and secure cloud architecture patterns.
• Experience with threat modeling and security design reviews.

Responsabilidades

• Support PSIRT and vulnerability handling activities.
• Validate, triage, track, and coordinate security reports.
• Provide practical remediation guidance to engineering teams.
• Help validate security fixes and reduce product security risks.
• Review code, APIs, and architecture to identify security issues early.
• Conduct threat modeling and security design reviews.
• Improve security automation in engineering workflows.
• Support SAST, SCA, secrets scanning, and other security controls.
• Maintain SBOMs, dependency visibility, and remediation follow‑up.
• Support security assessments and penetration testing.
• Maintain vulnerability handling playbooks and incident response runbooks.

Conocimientos

Product Security

DevSecOps

Cloud Security

Threat Modeling

SAST & SCA

Communication

Descripción del empleo

Action1 is seeking a Product Security Engineer to join the team responsible for securing Action1's multi‑tenant SaaS product. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable.

This is a hands‑on role for someone who understands both software engineering and cybersecurity, enjoys working directly with