Product Security Engineer: Build Secure HR Tech at Scale

Sozialwerk Pfarrer Sieber; Greater London; Ibrido; GBP 90.000 - 130.000; Tempo pieno

Vantaggi offerti da questo lavoro

Pre-IPO equity

Salary & benefits

Additional leave after 2 years

Impact Day

Family leave & mental health support

Catered lunch and snacks

Descrizione del lavoro

Personio's HR platform is seeking a Product Security Engineer to own the end-to-end vulnerability lifecycle from discovery to remediation and reporting. You will maintain and evolve the security toolchain, ensuring reliable, integrated workflows across development teams.

You will respond to security incidents, reproduce vulnerabilities, and coordinate tests with vendors and researchers while guiding engineers in secure design and code reviews.

Competenze

• 5+ years of hands-on experience in product security, offensive security, systems security or equivalent professional education.
• Experience with vulnerability management programmes and prioritising findings based on real-world risk (e.g., exploitability, exposure, CVSS/EPSS/KEV).
• Strong understanding of secure-by-default design, least privilege, robust authentication and authorization patterns, secure secrets handling, and secure logging.
• Strong understanding of threat modeling and ability to assess exploitability and attack paths by reviewing code and docs.
• Ability to guide engineers across languages and frameworks while balancing security and development.
• Fluent English communication skills (written and verbal).

Mansioni

• Own the end-to-end vulnerability lifecycle from discovery through triage, remediation tracking, risk acceptance, and reporting.
• Maintain and evolve the product security toolchain for reliable, integrated security workflows.
• Respond to security incidents and reproduce vulnerabilities; conduct internal testing as needed.
• Coordinate penetration tests with vendors and Bug Bounty researchers to focus research areas.
• Act as trusted security advisor to engineering through design and code reviews and ad-hoc guidance.
• Maintain security policies, guidance, documentation, and metrics for stakeholders and leaders.
• Drive security awareness across the engineering organization with knowledge-sharing sessions.

Conoscenze

Vulnerability management

Threat modeling

Incident response

Security policies

Security awareness

Vendor coordination

Descrizione del lavoro

Personio's HR platform is seeking a Product Security Engineer to own the end-to-end vulnerability lifecycle from discovery to remediation and reporting. You will maintain and evolve the security toolchain, ensuring reliable, integrated workflows across development teams.

You will respond to security incidents, reproduce vulnerabilities, and coordinate tests with vendors and researchers while guiding engineers in secure design and code reviews.