Lead Product Security Engineer: Threat Modeling & Red Team

Altium; Wrocław; On-site; PLN 180,000 - 300,000; Full time

Benefits offered by this job

Competitive benefits package

Job summary

Altium is seeking a Senior Product Security Engineer to extend its security capability with a focus on continuous vulnerability discovery and prevention. The role emphasizes security regression testing, threat modeling, and offensive security activities to identify real vulnerabilities before customers are affected.

You will work with engineering, architecture, and SRE teams to integrate security into product changes and scale secure-by-design practices across the platform.

Qualifications

• 5+ years in Application / Product Security.
• Bachelor's Degree or equivalent.
• Strong hands-on experience in web application security testing, API security and threat modeling.

Responsibilities

• Design and run security regression tests for critical flows.
• Lead threat modeling sessions for existing and new features.
• Perform Red Team-style testing and validate exploitability and business impact.
• Identify vulnerabilities using OWASP Top 10 as a guide and drive remediation with engineering teams.
• Ensure security is integrated into CI/CD and evolves with product changes.

Skills

Web app security

API security

Threat modeling

Offensive security

CI/CD security

Vulnerability discovery

Education

Bachelor's degree or equivalent

Tools

CI/CD pipelines

Penetration testing

Job description

Altium is seeking a Senior Product Security Engineer to extend its security capability with a focus on continuous vulnerability discovery and prevention. The role emphasizes security regression testing, threat modeling, and offensive security activities to identify real vulnerabilities before customers are affected.

You will work with engineering, architecture, and SRE teams to integrate security into product changes and scale secure-by-design practices across the platform.