Remote Product Security Engineer – Secure SaaS & Automate

Action1; España; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Fully remote work

High ownership

Cross-functional collaboration

Hands-on security product

Growth opportunities

Job summary

Action1 is seeking a Product Security Engineer to join the team responsible for securing Action1's multi‑tenant SaaS product. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable.

This is a hands‑on role for someone who understands both software engineering and cybersecurity, enjoys working directly with

Qualifications

• 3+ years in product security, application security, DevSecOps, or a related field.
• Strong software engineering background with ability to work with engineering teams.
• Understanding of application, API, infrastructure, and software supply chain risks.
• Experience with cloud security concepts and practices.
• Knowledge of IAM, network security, logging and secure cloud architecture patterns.
• Experience with threat modeling and security design reviews.

Responsibilities

• Support PSIRT and vulnerability handling activities.
• Validate, triage, track, and coordinate security reports.
• Provide practical remediation guidance to engineering teams.
• Help validate security fixes and reduce product security risks.
• Review code, APIs, and architecture to identify security issues early.
• Conduct threat modeling and security design reviews.
• Improve security automation in engineering workflows.
• Support SAST, SCA, secrets scanning, and other security controls.
• Maintain SBOMs, dependency visibility, and remediation follow‑up.
• Support security assessments and penetration testing.
• Maintain vulnerability handling playbooks and incident response runbooks.

Skills

Product Security

DevSecOps

Cloud Security

Threat Modeling

SAST & SCA

Communication

Job description

Action1 is seeking a Product Security Engineer to join the team responsible for securing Action1's multi‑tenant SaaS product. In this role, you will work closely with engineering, product, and security teams to identify risks early, support vulnerability handling, improve secure development practices, and help make product security practical, clear, and actionable.

This is a hands‑on role for someone who understands both software engineering and cybersecurity, enjoys working directly with