Principal Security Engineer

Storio group; Amsterdam; On-site; EUR 120,000 - 180,000; Full time

Job summary

Storio group is seeking a Principal Product Security Engineer to shape security across our ecommerce platform and engineering organisation. This senior role operates at the intersection of Product Security and Application Security, partnering with engineers, architects, and product teams to solve complex security problems and make secure-by-design engineering the norm.

You will have autonomy to define technical direction, establish practical security standards, and raise security capability

Qualifications

• Significant experience in Product Security, Application Security, or Security Engineering in a modern software environment.
• Strong experience with security architecture and threat modelling.
• Deep understanding of application and API security and secure development practices.
• Experience securing cloud native applications and software supply chain security.

Responsibilities

• Define security principles, standards, patterns, and guardrails for fast yet secure engineering.
• Provide hands-on security expertise across APIs, microservices, cloud, authentication, authorisation, and software supply chain security.
• Lead threat modelling and security architecture reviews for key products and tech initiatives.
• Partner with engineers and product teams to identify risks and implement pragmatic solutions.
• Evolve application security, vulnerability management, and security across the development lifecycle.
• Build or enable automation to improve security outcomes and reduce friction for engineers.
• Identify emerging security risks, including those from AI, and drive mitigation.

Skills

Product Security

Application Security

Security Engineering

Threat Modelling

Security Architecture

Cloud Security

AI Security

Job description

Make Your Mark as an Principal Product Security Engineer at Storio group

About the role.

We are looking for a Principal Product Security Engineer to help shape how security is built into our ecommerce platform and engineering organisation. This is a senior individual contributor role where you will operate at the intersection of Product Security and Application Security. You will work directly with engineers, architects, and product teams to solve complex security problems, influence technical decisions, and make secure-by-design engineering the norm.

You will have significant autonomy and influence to define the technical direction of Product Security, establish practical security standards, and raise security capability across engineering. As we increase our use of AI, you will also help us adopt AI securely and use it creatively to improve security and engineering productivity.

How you embrace curiosity daily.

• Define security principles, standards, patterns, and guardrails that enable engineers to build securely at pace.
• Provide hands on security expertise across APIs, microservices, cloud infrastructure, authentication, authorisation, and software supply chain security.
• Lead threat modelling and security architecture reviews for important products and technology initiatives.
• Partner with engineers, architects, and product teams to identify risks and develop pragmatic solutions.
• Evolve our approach to application security, vulnerability management, and security throughout the development lifecycle.
• Build or enable automation that improves security outcomes while reducing friction for engineering teams.
• Identify emerging security risks, including those introduced by AI, and drive appropriate mitigation.

How you make your mark.

• Help establish the principles and practices that allow teams to move quickly while managing risk effectively.
• Raise overall security capability across the engineering organisation by mentoring engineers and Security Champions.
• Develop meaningful Product Security metrics and use them to drive continuous improvement.
• Direct the technical direction of Product Security and influence how security is designed, built, and operated across our platform.
• Communicate potential security risks and their impact to engineering and senior stakeholders.
• Enable engineering teams to adopt AI securely and enhance productivity.

What you bring to the team.

• Significant experience in Product Security, Application Security, or Security Engineering in a modern software engineering environment.
• Strong experience with security architecture, threat modelling, and turning security concerns into practical engineering solutions.
• Deep understanding of application and API security, secure development practices, and modern software architectures.
• Experience securing cloud native applications, distributed systems, and embedding security into engineering workflows and the software development lifecycle.
• Strong understanding of software supply chain security, dependency risk, and SBOMs.
• Proven ability to influence multiple engineering teams, define security standards, and communicate effectively with senior technical stakeholders.

What sets you apart.

• Experience with, or a strong interest in, AI security and using AI to improve security engineering.
• Experience with Infrastructure as Code security, Security Champions, or Bug Bounty programmes.
• Experience or formal qualifications in relevant security or cloud areas.