Senior Product Security Engineer - Impact & Equity

Sozialwerk Pfarrer Sieber; Madrid; Hybrid; EUR 70,000 - 100,000; Full time

Job summary

Personio is seeking a Product Security Engineer to embed security across our product development lifecycle. You will partner with engineering to oversee the vulnerability lifecycle, implement tooling, and perform reviews that strengthen design and code security.

The role requires 5+ years in security, strong threat modeling skills, and fluent English. Occasional on-site collaboration is expected, with multiple base locations including Madrid, Munich, Berlin, Dublin, London, Amsterdam.

Qualifications

• 5+ years of hands-on experience in product security, offensive security, systems security or equivalent professional education.
• Experience with vulnerability management programmes and prioritising findings based on risk (exploitability, exposure, business impact, CVSS/EPSS/KEV).
• Ability to define and report vulnerability management programme metrics.
• Expertise in secure-by-default design, least privilege, robust authentication/authorization, secure secrets handling, dependency management, and security logging/monitoring.
• Strong understanding of security vulnerabilities and threat modeling; assess real-world exploitability and attack paths by reviewing code/docs.
• Guide engineers on remediation methods across languages and frameworks.
• Fluent English communication (written and verbal).
• Bias for action; identify gaps, drive security outcomes; handle ambiguous situations.

Responsibilities

• Own end-to-end vulnerability lifecycle from discovery to remediation reporting.
• Maintain and evolve the product security toolchain and automation.
• Respond to security incidents and perform internal testing as needed.
• Coordinate with security vendors and bug bounty researchers for tests.
• Provide design and code security reviews to engineering teams.
• Maintain security policies, guidance and metrics for stakeholders and leaders.
• Drive security education through knowledge-sharing sessions across engineering.

Skills

Vulnerability management

Security engineering

Threat modeling

Security reviews

Security metrics

English fluency

Bias for action

Ambiguity handling

Job description

Personio is seeking a Product Security Engineer to embed security across our product development lifecycle. You will partner with engineering to oversee the vulnerability lifecycle, implement tooling, and perform reviews that strengthen design and code security.

The role requires 5+ years in security, strong threat modeling skills, and fluent English. Occasional on-site collaboration is expected, with multiple base locations including Madrid, Munich, Berlin, Dublin, London, Amsterdam.