Principal Security Engineer

Storio group; Amsterdam; On-site; EUR 140,000 - 190,000; Full time

Job summary

Storio group is seeking a Principal Product Security Engineer to shape security in our ecommerce platform and engineering organisation. This is a senior individual contributor role at the intersection of Product Security and Application Security, working with engineers, architects, and product teams to solve complex security problems and promote secure-by-design practices.

You will define security principles, lead threat modelling and architecture reviews, mentor Security Champions, and drive

Qualifications

• Significant experience in Product Security or Application Security.
• Strong experience with security architecture and threat modelling.
• Deep understanding of API and cloud security.
• Experience securing AI-enabled applications preferred.

Responsibilities

• Define security principles, standards, and guardrails for secure-by-design engineering.
• Lead threat modelling and security reviews for major products.
• Mentor engineers and Security Champions across teams.
• Drive security metrics and improve security across the SDLC.
• Identify AI-related security risks and mitigation strategies.

Skills

Product Security

Application Security

Threat Modelling

Security Architecture

AI Security

Cloud Security

Job description

Make Your Mark as an Principal Product Security Engineer at Storio group

About the role.

We are looking for a Principal Product Security Engineer to help shape how security is built into our ecommerce platform and engineering organisation. This is a senior individual contributor role where you will operate at the intersection of Product Security and Application Security. You will work directly with engineers, architects, and product teams to solve complex security problems, influence technical decisions, and make secure-by-design engineering the norm.

You will have significant autonomy and influence to define the technical direction of Product Security, establish practical security standards, and raise security capability across engineering. As we increase our use of AI, you will also help us adopt AI securely and use it creatively to improve security and engineering productivity.

How you embrace curiosity daily.

• Define security principles, standards, patterns, and guardrails that enable engineers to build securely at pace.

• Provide hands on security expertise across APIs, microservices, cloud infrastructure, authentication, authorisation, and software supply chain security.

• Lead threat modelling and security architecture reviews for important products and technology initiatives.

• Partner with engineers, architects, and product teams to identify risks and develop pragmatic solutions.

• Evolve our approach to application security, vulnerability management, and security throughout the development lifecycle.

• Build or enable automation that improves security outcomes while reducing friction for engineering teams.

• Identify emerging security risks, including those introduced by AI, and drive appropriate mitigation.

How you make your mark.

• Help establish the principles and practices that allow teams to move quickly while managing risk effectively.

• Raise overall security capability across the engineering organisation by mentoring engineers and Security Champions.

• Develop meaningful Product Security metrics and use them to drive continuous improvement.

• Direct the technical direction of Product Security and influence how security is designed, built, and operated across our platform.

• Communicate potential security risks and their impact to engineering and senior stakeholders.

• Enable engineering teams to adopt AI securely and enhance productivity.

What you bring to the team.

• Significant experience in Product Security, Application Security, or Security Engineering in a modern software engineering environment.

• Strong experience with security architecture, threat modelling, and turning security concerns into practical engineering solutions.

• Deep understanding of application and API security, secure development practices, and modern software architectures.

• Experience securing cloud native applications, distributed systems, and embedding security into engineering workflows and the software development lifecycle.

• Strong understanding of software supply chain security, dependency risk, and SBOMs.

• Proven ability to influence multiple engineering teams, define security standards, and communicate effectively with senior technical stakeholders.

What sets you apart.

• Experience with, or a strong interest in, AI security and using AI to improve security engineering.

• Experience with Infrastructure as Code security, Security Champions, or Bug Bounty programmes.

• Experience or formal qualifications in relevant security or cloud areas.