Senior Product Security Engineer

Collibra; España; Presencial; EUR 70.000 - 110.000; Jornada completa

Descripción de la vacante

Collibra is seeking a Senior Product Security Engineer to join our high-impact Product Security team. You will lead vulnerability identification and remediation consulting for global product development, providing technical leadership and security advocacy to accelerate secure time-to-value with AI-enabled security automation.

You will perform application and network penetration testing, threat modeling, source-code reviews, and collaborate with engineering teams to embed security best practices

Formación

• 5+ years of Penetration Testing, Product Security, and Application Security experience.

Responsabilidades

• Perform Application Penetration Testing (Web-app, API, Thick Client).
• Conduct Network Penetration Testing (Internal, External).
• Test Cloud Service security across AWS, Azure, GCP.
• Develop Threat Models for products.
• Perform Source-Code Reviews.
• Deliver high-quality reports on time.
• Collaborate with cross-functional teams to embed security practices.
• Enable remediation by building relationships with engineering teams.
• Advance professional skills via industry certifications or training.
• Assist triaging Code Security findings from SAST, SCA, IAST, DAST.
• Leverage AI and MCP for intelligent security guidance and automation.

Conocimientos

Penetration testing

Application security

Programming languages

Security standards

DevOps security

AI security tooling

Incident triage

Communication skills

Educación

Bachelor’s degree or equivalent

Herramientas

OSSTMM

OWASP

SAMM

NIST SP 800-53

PTES

SAST/IAST/DAST tools

AI tooling (Claude,Gemini,ChatGPT,Copilot)

Descripción del empleo

Joining Collibra’s Product Security team

Collibra is seeking a Senior Product Security Engineer to join our high-impact team. You will be a key individual responsible for identifying vulnerabilities and providing expert remediation consulting for our global product development teams. This role provides critical technical leadership and oversight, ensuring Collibra continues to deliver secure, resilient products and services to our customers. You will act as an application security evangelist, partnering with engineers to accelerate secure time-to-value while leveraging cutting-edge AI and MCP to create context-aware security automation.

Product Security Engineers at Collibra are responsible for

• Application Penetration Testing (Web-app, API, Thick Client)
• Network Penetration Testing (Internal, External)
• Cloud Service penetration testing tradecraft and methodologies across multiple service providers (AWS, Azure, GCP)
• Threat Modeling
• Source-Code Reviews
• Ensure quality reports and services are delivered efficiently and on time
• Collaborate with cross-functional teams to ensure that security best practices are integrated into the development process
• Enable remediation of discovered vulnerabilities through the building of relationships with engineering teams
• Continue to develop professional skills with relevant industry specific certifications or training
• Assist with triaging Code Security findings identified by SAST, SCA, IAST, DAST, where necessary.
• Leverage AI and MCP to create intelligent, context-aware security guidance and automation.

You have

• 5+ years of relevant Penetration Testing, Product Security, and Application Security experience.
• 2+ years securing Java, Python, and/or JavaScript web applications.
• Experience with advanced security tools and techniques for simulating real-world attacks.
• Familiarity with Open-Source Security Testing Methodology Manual (OSSTMM), Open Web Application Security Project (OWASP), Software Assurance Maturity Model (SAMM), National Institute of Standards and Technology (NIST) Special Publications, and PTES (Penetration Testing Execution Standard).
• Experience testing against compliance frameworks such as PCI, FISMA, HIPAA, FedRAMP, or HITRUST.
• Strong working knowledge of at least two programming or scripting languages.
• Familiarity with best practices for securing the SDLC and DevOps processes.
• Ability to triage security incidents when needed.
• Experience with AI security tooling and context-aware SSDLC automation.
• Understanding of AI privacy and governance in developer workflows.
• Experience using and building collaborative agentic AI systems.
• Demonstrated proficiency in leveraging AI tools (e.g., Claude, Gemini, ChatGPT, Copilot) to solve real-world business challenges, drive measurable outcomes, or streamline workflows.
• A Bachelor’s degree or equivalent certification and experience.

You are

• Grounded in security principles, policies, and industry best practices.
• An excellent verbal and written communicator, able to produce assessment reports, presentations, and operating procedures.
• A developing or established leader who matures security practices and mentors junior teammates.
• An advocate for the remediation of application security risk and, simultaneously, the associated development/engineering teams.

Measures of success

• Within your first month, you will build foundational knowledge of Collibra’s processes, tools, and SDLC. You will use that knowledge to design and implement repeatable penetration-testing methodologies tailored to the environment.
• Within your first three months, you will independently plan and execute penetration-testing engagements, then partner with development teams to understand, prioritize, and remediate identified security issues.
• Within your first six months, you will partner with your leader to develop a security roadmap for comprehensive, proactive assessments across Collibra. You will incorporate threat intelligence to anticipate emerging threats and identify potential security gaps.

Benefits at Collibra

Collibra recognizes and values that everyone has different needs, interests, and life goals. We built our benefits program with flexibility in mind to support you and your loved ones through a diverse range of circumstances and life events. These flexible offerings sit on a foundation of competitive compensation, health coverage, and time off. Learn more about Collibra’s benefits.

We create inclusion and belonging through how we onboard, meet, connect, engage, and communicate. Learn more aboutdiversity, equity, and inclusion at Collibra.

At Collibra, we’re proud to be an equal opportunity employer. We realize the key to creating a company with a world-class culture and employee experience comes from who we hire and creating a workplace that celebrates everyone.

With this, we proudly consider qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sexual orientation, pregnancy, sex, gender identity, gender expression, genetic information, physical or mental disability, HIV status, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status or any other legally protected category. If you have a need that requires accommodation, let us know by completing ourAccommodations for Applicants form.