Senior Product Security Engineer | Drive Secure-by-Design

Commercetools; Greater London; Hybride; GBP 120 000 - 180 000; Plein temps

Résumé du poste

Commercetools is seeking a Principal Engineer Product Security to empower the Engineering team to build secure services on multi-cloud infrastructure. You will shape the product security strategy, increase maturity, and embed security into the SDLC while collaborating across product, engineering, and legal teams.

You will lead threat modeling, security reviews, and remediation efforts, and drive customer conversations on product security.

Qualifications

• 5+ years of proven track record in hands-on Product Security.
• 2+ years of experience improving Product Security in a leadership role.
• Experience with customer-facing security roles and influencing roadmaps in matrix organizations.
• Experience in a scale-up environment with ambitious and competing priorities.

Responsabilités

• Formulate, evangelise, and drive adoption of the product security strategy.
• Assess, advise on, and increase the security maturity posture.
• Create a standardised security architecture and operational best practices.
• Help track and drive remediation of security and technology risks.
• Educate product teams on risk assessments, threat modelling, and building secure api-first applications.
• Review requirements and designs to help product teams address shortcomings.
• Embed security tooling into the development process.
• Collaborate with product teams to improve overall security and resolve specific issues.
• Facilitate or lead customer conversations regarding product security.
• Triage and investigate new attack vectors to determine risk mitigation.
• Drive security and quality initiatives across the organization and support certification audits.
• Collaborate with Product Management, Principal Engineers, and legal/compliance teams.
• Identify skills gaps and facilitate knowledge sharing across the organization.

Connaissances

Product Security

Leadership

Customer-facing security

Threat Modeling

Security in SDLC

Static Analysis

Code Review

DevSecOps

JavaScript

Go

Project Management

Agile

Training/Onboarding

English proficiency

Outils

Kubernetes

Terraform

Vault

Linux

APIs

Web App Security

Description du poste

Commercetools is seeking a Principal Engineer Product Security to empower the Engineering team to build secure services on multi-cloud infrastructure. You will shape the product security strategy, increase maturity, and embed security into the SDLC while collaborating across product, engineering, and legal teams.

You will lead threat modeling, security reviews, and remediation efforts, and drive customer conversations on product security.