Product Security Engineer: DevSecOps & Threat Modeling

Keenfinity Group; Ovar; On-site; EUR 45,000 - 75,000; Full time

Benefits offered by this job

Flexible work

Health insurance

On-site canteen

Free parking

Training & certifications

Career progression

Global collaboration

Disability friendly

Job summary

Keenfinity Group is seeking a mid-level Product Security Engineer to guide security across new products and platforms. You will embed security in the product lifecycle, perform threat modeling, conduct AppSec reviews, and drive secure coding practices with CI/CD integrations.

You will also lead vulnerability testing, tooling automation, and cloud security efforts, shaping secure cloud deployments and incident response processes across the organization.

Qualifications

• 3–5 years in product, application, or offensive security.
• Degree in Computer Science, Cybersecurity, or related field, or equivalent experience.
• Hands-on vulnerability assessment experience.
• Application security, including secure code review and use of SAST/DAST/SCA tooling.
• Experience with threat modeling methodologies (e.g., STRIDE).
• Working knowledge of secure SDLC / DevSecOps and CI/CD security integration.

Responsibilities

• Provide security guidance on new products and technologies across the organization.
• Act as the security lead on development projects, embedding security throughout the product development lifecycle.
• Support development teams with DevSecOps practices, integrating security into CI/CD pipelines and fostering a shift-left security culture.
• Lead threat modeling exercises to identify and prioritize risks early in design.
• Perform application security assessments and secure code reviews across web and native codebases.
• Operate application security tooling (SAST, DAST, SCA), configuring scans and triaging findings.
• Advise development teams on secure coding practices and remediation of vulnerabilities.
• Conduct regular vulnerability testing and remediation tracking across products and infrastructure.
• Manage the product security tooling pipeline and scale security processes with automation.
• Assess and secure cloud environments (AWS) and embed security into IaC and cloud CI/CD workflows.
• Respond to vulnerabilities surfaced through threat detection systems and incidents.

Skills

Product security

Threat modeling

DevSecOps

Cloud security

Python scripting

Education

Bachelor's in CS/Cybersecurity

Tools

SAST tooling

DAST tooling

SCA tooling

PKI management

Job description

Keenfinity Group is seeking a mid-level Product Security Engineer to guide security across new products and platforms. You will embed security in the product lifecycle, perform threat modeling, conduct AppSec reviews, and drive secure coding practices with CI/CD integrations.

You will also lead vulnerability testing, tooling automation, and cloud security efforts, shaping secure cloud deployments and incident response processes across the organization.