Staff Product Security Engineer

Altium

Katowice

On-site

PLN 150,000 - 230,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Altium is seeking a Staff Product Security Engineer to strengthen product security with a focus on continuous vulnerability discovery and prevention. You will lead security regression testing, threat modeling, and offensive security activities to identify real vulnerabilities before customers do.

You will drive testing across authentic app flows, collaborate with engineering, and ensure security coverage in CI/CD pipelines as part of a secure-by-design approach.

Qualifications

5+ years in Application / Product Security.
Strong hands-on experience in web application security testing and API security.
Threat modeling methodologies and OWASP Top 10 knowledge.
Hands-on penetration testing and security regression testing.
CI/CD security integration and identifying business logic vulnerabilities.

Responsibilities

Security Regression Testing across critical app flows.
Design and maintain security regression test suites.
Ensure vulnerabilities, once fixed, are prevented from recurring.
Integrate security regression into CI/CD pipelines.
Define coverage targets for security-critical areas (auth, APIs, data flows).
Threat Modeling for existing systems and new features.
Lead offensive security activities (Red Team-style testing).
Reproduce issues with engineering teams and prioritize fixes.
Validate remediation and exploitability of findings.
OWASP Top 10-driven vulnerability discovery.
Security assurance for product changes.

Skills

Security testing

Threat modeling

OWASP Top 10

Penetration testing

CI/CD security

Business logic vulnerabilities

Authentication/Authorization

Multi-tenant security

Cloud-native security

Red Team-style testing

Education

Bachelor's Degree or equivalent

Job description

Staff Product Security Engineer

Job Description

Why A365 Software Engineering?

Build the cloud platform that’s transforming electronics design. Altium 365 for cloud lets design engineers communicate, collaborate and bring their ideas to market more efficiently than any platform in the industry.

We are looking for a Senior Product Security Engineer to extend our Product Security capability with a strong focus on continuous vulnerability discovery and prevention.

This role is responsible for:

Building and executing security regression testing
Driving threat modeling across existing and new functionality
Conducting targeted offensive security activities (Red Team–style testing)
Identifying real vulnerabilities based on a deep understanding of our platform and the OWASP Top 10 Web Application Security Risks

The goal is simple: ensure that both existing functionality and new changes remain secure over time, and that real vulnerabilities are discovered before customers do.

Key Responsibilities

Security Regression Testing
Design and maintain security regression test suites covering critical application flows
Ensure vulnerabilities, once fixed, are permanently prevented from recurring
Integrate security regression into CI/CD pipelines
Define coverage targets for security-critical areas (auth, access control, APIs, data flows)
Threat Modeling
Lead structured threat modeling sessions for:
Existing system components
New features and architectural changes
Identify attack surfaces, abuse cases, and trust boundaries
Translate threats into:
Test cases
Security requirements
Mitigation plans
Ensure threat modeling becomes a continuous lifecycle activity
Offensive Security / Red Team Activities
Perform manual and automated security testing simulating real attacker behavior
Focus on high-impact vulnerabilities, not theoretical findings
Validate exploitability and business impact
Partner with engineering teams to:
Reproduce issues
Prioritize fixes
Validate remediation
OWASP Top 10–Driven Vulnerability Discovery
Continuously assess the platform against OWASP Top 10 categories
Use deep product knowledge to find non-obvious, context-specific vulnerabilities
Go beyond tooling (DAST/SAST) to uncover logic flaws and abuse paths
Security Assurance for Product Changes
Review new features and changes for security risks
Ensure all changes are:
Threat-modeled
Covered by regression tests
Act as a security gatekeeper without becoming a bottleneck:
Enable teams with guidance and tooling
Avoid heavy process overhead
Collaboration & Enablement
Work closely with:
Engineering teams
Architecture
SRE / Platform teams
Contribute to secure-by-design practices
Support developers in understanding and fixing vulnerabilities
Help scale security through:
Reusable patterns
Automation
Security guidance

Qualifications

Required Qualifications

5+ years in Application / Product Security
Bachelor's Degree or equivalent of 12 years of work experience
Strong hands-on experience in:
Web application security testing
API security
Threat modeling methodologies
Deep understanding of OWASP Top 10
Experience with:
Manual penetration testing
Security regression testing
CI/CD security integration
Ability to identify business logic vulnerabilities
Strong understanding of:
Authentication, authorization, and session management
Multi-tenant architectures
Cloud-native systems

Preferred Qualifications

Experience in SaaS / multi-tenant platforms
Familiarity with:
Bug bounty programs
Red teaming
Security automation frameworks
Knowledge of:
AWS
Identity systems and federation (SSO, MFA)
Background in software engineering (ability to read/write code)

Additional Information

Altium Limited, a part of the Renesas Group and headquartered in San Diego, California, is a global software company accelerating the pace of electronics innovation. We are redefining electronic product creation in a software-defined world with our industry-first cloud-based platform that unites every stakeholder and phase of electronics development.

From startups to world’s technology giants, our digital platforms give more power to PCB designers, supply chain, and manufacturing, letting them collaborate as never before. At Altium, our teams are empowered to innovate, collaborate globally, and help create the future of electronics development.

We believe in rewarding our employees with a competitive benefits package alongside their salary. More information will be provided during the hiring process.

VideoUrl

https://youtu.be/k-zs4tB6nNc