Staff Product Security Engineer: Vulnerability & Security Lead

Aiven; Helsinki; Hybrid; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Equity plan

Hybrid work policy

Equipment for success

Professional Development Budget

Wellbeing program

Global Time Off Commitment

Country-specific benefits

Job summary

Aiven is seeking a Staff Product Security Engineer to join our Product Security team. You will identify, report, and help remediate vulnerabilities, manage our bug bounty program, and provide security insights for new products.

Collaborate with IAM and Security Operations to secure our products and infrastructure. You’ll perform vulnerability triage, security testing, audit support, and IAM automation tasks, while contributing to PCI DSS, ISO 27001, and SOC 2 compliance initiatives across a

Qualifications

• Bachelor's or Master's in CS/Engineering/Info Security or equivalent training.
• 5+ years in information security or related field.
• Experience in software development, SRE, architecture, risk management, and PM assets.
• Knowledge of security, distributed systems and microservices.
• Senior certifications in hyperscaler clouds and security testing beneficial.
• Experience in risk and vulnerability management in multi-cloud environments.
• Experience with modern tech such as public cloud and networking.
• Fluency in English, verbal and written.

Responsibilities

• Triaging and analyzing vulnerability results; document false positives.
• Review internal network vulnerability scans with admins and prioritize remediations.
• Conduct security testing of products using tools and manual methods; report findings.
• Evaluate issues reported by staff, customers, and third parties for reproducibility.
• Determine if engineering fixes address vulnerabilities and perform gap analysis.
• Support PCI DSS, ISO 27001, SOC 2 compliance with reports and validation.
• Identify gaps in scanner coverage and suggest improvements to configurations.
• Assist in 3rd-party audits and penetration tests.
• Assist IAM automation and AI security assessments.

Skills

5+ years information security

Software development experience

Fluency in English

Risk management

Education

Bachelor's or Master's in CS/Engineering/Info Security/IT

Tools

Vulnerability scanners

Security testing tools

Audit tooling

Job description

Aiven is seeking a Staff Product Security Engineer to join our Product Security team. You will identify, report, and help remediate vulnerabilities, manage our bug bounty program, and provide security insights for new products.

Collaborate with IAM and Security Operations to secure our products and infrastructure. You’ll perform vulnerability triage, security testing, audit support, and IAM automation tasks, while contributing to PCI DSS, ISO 27001, and SOC 2 compliance initiatives across a