Senior Product Security Engineer - Secure by Design

Commercetools; Greater London; Hybrid; GBP 120,000 - 170,000; Full time

Benefits offered by this job

Comprehensive health benefits

Learning and development budget

Family Leave Plus

Equity participation program

Job summary

Commercetools is seeking a Principal Engineer Product Security to join our Engineering team. You’ll drive product security strategy, threat modelling, and secure architecture across multi-cloud services, while embedding security into the SDLC.

You will collaborate with product teams, legal/compliance, and leadership to raise security maturity, triage risks, and educate engineers. This hybrid role requires 5+ years in product security and clear English communication.

Qualifications

• 5+ years of proven hands-on product security experience.
• 2+ years in a leadership role focusing on security.
• Experience in customer-facing security roles and influencing roadmaps.
• Experience in scale-up environments with competing priorities.
• Expertise in requirements capture, threat modelling, and secure SDLC.
• Experience with secure architecture reviews and tools.
• Strong English communication skills.

Responsibilities

• Formulate, evangelise, and drive adoption of the product security strategy.
• Assess and improve security maturity posture across teams.
• Create standardised security architecture and best practices.
• Track remediation of security and technology risks.
• Educate teams on risk assessments, threat modelling, and secure API-first apps.
• Review designs to address security shortcomings.
• Embed security tooling into the development process.
• Review external penetration tests and prioritise fixes.
• Collaborate with product teams to improve security and resolve issues.
• Lead customer conversations regarding product security.
• Triage new attack vectors to determine mitigations.
• Drive security initiatives and support audits.
• Collaborate with Product Management and legal/compliance.
• Identify skills gaps and facilitate knowledge sharing.

Skills

5+ years Product Security

Leadership experience

Linux

Kubernetes

Terraform

Vault

API security

DevSecOps

JavaScript

Go

Agile

Threat modeling

Secure architecture

English communication

Tools

Kubernetes

Terraform

Vault

API security tooling

Job description

Commercetools is seeking a Principal Engineer Product Security to join our Engineering team. You’ll drive product security strategy, threat modelling, and secure architecture across multi-cloud services, while embedding security into the SDLC.

You will collaborate with product teams, legal/compliance, and leadership to raise security maturity, triage risks, and educate engineers. This hybrid role requires 5+ years in product security and clear English communication.