Remote Staff Product Security Engineer (AppSec)

Devconnectplatform; France; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Remote-first

Equity

25 days PTO

Two annual company & team get-togthers

Job summary

Filigran is hiring a Staff AppSec / Product Security Engineer to embed security into the XTM platform across OpenCTI/OpenAEV. You’ll advise the CISO, lead threat modeling, reviews, and code fixes while mentoring engineers in a remote-first, async environment.

You’ll drive secure SDLC tooling, manage vulnerabilities, and collaborate with R&D, Compliance, and Customer Success to keep 6,000+ organizations protected. Experience in GraphQL, RBAC, multi-tenancy is valued.

Qualifications

• Master's degree in computer science or cybersecurity.
• 8+ years in software engineering and product security.
• Expertise in secure software development and API/security concepts.

Responsibilities

• Lead threat modeling and security reviews across features, including GraphQL, multi-tenancy and RBAC.
• Drive secure SDLC and CI/CD tooling (SAST/SCA, container scanning, SBOMs).
• Mentor engineers, review critical PRs, and coach security champions.

Skills

Python

Node.js

TypeScript

Java

Rust

GraphQL security

Kubernetes security

CI/CD security

RBAC

Threat modeling

Education

Master's degree in computer science or cybersecurity

Tools

SAST

SCA

Snyk

SBOMs

Renovate

OpenCTI/OpenAEV

Job description

Filigran is hiring a Staff AppSec / Product Security Engineer to embed security into the XTM platform across OpenCTI/OpenAEV. You’ll advise the CISO, lead threat modeling, reviews, and code fixes while mentoring engineers in a remote-first, async environment.

You’ll drive secure SDLC tooling, manage vulnerabilities, and collaborate with R&D, Compliance, and Customer Success to keep 6,000+ organizations protected. Experience in GraphQL, RBAC, multi-tenancy is valued.