Principal Product Security Engineer – AI & Cloud

Storio group; Amsterdam; On-site; EUR 120,000 - 180,000; Full time

Job summary

Storio group is seeking a Principal Product Security Engineer to shape security across our ecommerce platform and engineering organisation. This senior role operates at the intersection of Product Security and Application Security, partnering with engineers, architects, and product teams to solve complex security problems and make secure-by-design engineering the norm.

You will have autonomy to define technical direction, establish practical security standards, and raise security capability

Qualifications

• Significant experience in Product Security, Application Security, or Security Engineering in a modern software environment.
• Strong experience with security architecture and threat modelling.
• Deep understanding of application and API security and secure development practices.
• Experience securing cloud native applications and software supply chain security.

Responsibilities

• Define security principles, standards, patterns, and guardrails for fast yet secure engineering.
• Provide hands-on security expertise across APIs, microservices, cloud, authentication, authorisation, and software supply chain security.
• Lead threat modelling and security architecture reviews for key products and tech initiatives.
• Partner with engineers and product teams to identify risks and implement pragmatic solutions.
• Evolve application security, vulnerability management, and security across the development lifecycle.
• Build or enable automation to improve security outcomes and reduce friction for engineers.
• Identify emerging security risks, including those from AI, and drive mitigation.

Skills

Product Security

Application Security

Security Engineering

Threat Modelling

Security Architecture

Cloud Security

AI Security

Job description

Storio group is seeking a Principal Product Security Engineer to shape security across our ecommerce platform and engineering organisation. This senior role operates at the intersection of Product Security and Application Security, partnering with engineers, architects, and product teams to solve complex security problems and make secure-by-design engineering the norm.

You will have autonomy to define technical direction, establish practical security standards, and raise security capability