Senior Product Security Engineer — Threat Modeling & Red Team

Altium; Katowice; On-site; PLN 150,000 - 230,000; Full time

Job summary

Altium is seeking a Staff Product Security Engineer to strengthen product security with a focus on continuous vulnerability discovery and prevention. You will lead security regression testing, threat modeling, and offensive security activities to identify real vulnerabilities before customers do.

You will drive testing across authentic app flows, collaborate with engineering, and ensure security coverage in CI/CD pipelines as part of a secure-by-design approach.

Qualifications

• 5+ years in Application / Product Security.
• Strong hands-on experience in web application security testing and API security.
• Threat modeling methodologies and OWASP Top 10 knowledge.
• Hands-on penetration testing and security regression testing.
• CI/CD security integration and identifying business logic vulnerabilities.

Responsibilities

• Security Regression Testing across critical app flows.
• Design and maintain security regression test suites.
• Ensure vulnerabilities, once fixed, are prevented from recurring.
• Integrate security regression into CI/CD pipelines.
• Define coverage targets for security-critical areas (auth, APIs, data flows).
• Threat Modeling for existing systems and new features.
• Lead offensive security activities (Red Team-style testing).
• Reproduce issues with engineering teams and prioritize fixes.
• Validate remediation and exploitability of findings.
• OWASP Top 10-driven vulnerability discovery.
• Security assurance for product changes.

Skills

Security testing

Threat modeling

OWASP Top 10

Penetration testing

CI/CD security

Business logic vulnerabilities

Authentication/Authorization

Multi-tenant security

Cloud-native security

Red Team-style testing

Education

Bachelor's Degree or equivalent

Job description

Altium is seeking a Staff Product Security Engineer to strengthen product security with a focus on continuous vulnerability discovery and prevention. You will lead security regression testing, threat modeling, and offensive security activities to identify real vulnerabilities before customers do.

You will drive testing across authentic app flows, collaborate with engineering, and ensure security coverage in CI/CD pipelines as part of a secure-by-design approach.