Product Security Leader - Remote & AI-Driven Security

M Files; Helsinki; Remote; EUR 120,000 - 170,000; Full time

Benefits offered by this job

Career progression

Competitive salary

Remote-friendly work

Travel opportunities

Make real impact

Job summary

M-Files is seeking a Product Security Manager in Helsinki, Finland, to lead the Product Security team and shape security strategy for our cloud-native products. You will mentor engineers, drive secure coding practices, and partner with cross-functional teams to embed security across the lifecycle.

Responsibilities include threat modeling, security assessments, vulnerability management, and coordinating with Legal and Compliance on regulations.

Qualifications

• Bachelor's or Master's degree in Computer Science, Information Security or related field.
• 5+ years hands-on product security experience and leadership ability.
• Strong knowledge of cloud-native architectures (AKS/Kubernetes) and container security.
• Deep understanding of the secure development lifecycle and OWASP practices.
• Experience with vulnerability management and CVSS scoring.
• Ability to use AI tools to enhance security tasks and reporting.

Responsibilities

• Lead and prioritize the Product Security team's work and strategy.
• Embed the secure development lifecycle across the product organization.
• Coordinate threat modeling, security assessments, and code reviews.
• Oversee vulnerability management, reporting, and external testing.
• Collaborate with Legal, Privacy, and Compliance on regulatory matters.

Skills

Product security

Cloud security

Threat modeling

OWASP ASVS

SAST/DAST/SCA tooling

AI security tooling

Communication

Education

CS/InfoSec degree

Tools

SAST/DAST/SCA tooling

Penetration testing tooling

Job description

M-Files is seeking a Product Security Manager in Helsinki, Finland, to lead the Product Security team and shape security strategy for our cloud-native products. You will mentor engineers, drive secure coding practices, and partner with cross-functional teams to embed security across the lifecycle.

Responsibilities include threat modeling, security assessments, vulnerability management, and coordinating with Legal and Compliance on regulations.