Product Security Engineer: Impactful DevSecOps & Cloud

Keenfinity Group; Ovar; Ibrido; EUR 55.000 - 75.000; Tempo pieno

Vantaggi offerti da questo lavoro

Flexible work conditions

Health insurance

Canteen

Free parking

Training & certifications

Career progression

Disability-friendly hiring

Descrizione del lavoro

Keenfinity Group is seeking a mid-level Product Security Engineer to join the VMS Team Ovr. You will guide security across the product lifecycle, perform threat modeling, and lead secure coding practices to strengthen our devices and software.

You will collaborate with engineering on secure development, implement SAST/DAST/SCA tooling, and help scale security through automation and cloud best practices.

Competenze

• 3–5 years in product, application, or offensive security.
• Degree in Computer Science, Cybersecurity, or related field.
• Hands‑on vulnerability assessment experience.
• Application security experience with secure code reviews and SAST/DAST/SCA tooling.
• Experience with threat modeling methodologies (e.g., STRIDE).
• Knowledge of secure SDLC / DevSecOps and CI/CD security integration.
• Cloud security knowledge, particularly AWS, IAM, and best practices.
• Strong PKI, digital certificates, and cryptography understanding.
• Scripting and automation ability (e.g., Python) to scale tooling.
• Familiarity with incident detection and response processes.
• Strong communication skills across development teams.

Mansioni

• Provide security guidance on new products and technologies across the organization.
• Act as the security lead on development projects, embedding security throughout the product development lifecycle.
• Support development teams with DevSecOps practices, integrating security into CI/CD pipelines.
• Guide project teams through secure product lifecycle management and ongoing security support.
• Collaborate on regular product security assessments and lead threat modeling exercises.
• Perform application security assessments and secure code reviews across web, backend, and native codebases.
• Operate SAST/DAST/SCA tooling and triage findings.
• Advise on secure coding practices and remediation of vulnerabilities.
• Conduct vulnerability testing and prioritize remediation across devices and infrastructure.
• Manage security tooling operations and automate processes to scale security efforts.
• Assess and secure cloud environments (AWS) and infrastructure-as-code deployments.
• Support incident detection and response processes for security events.
• Operate and manage PKI and cryptographic services; maintain documentation and standards.

Conoscenze

Security engineering

Threat modeling

DevSecOps

CI/CD security

Scripting (Python)

Cloud security

PKI

Security tooling

Secure SDLC

Formazione

Bachelor's degree in Computer Science / Cybersecurity

Strumenti

SAST

DAST

SCA

Python

IAM

AWS

Descrizione del lavoro

Keenfinity Group is seeking a mid-level Product Security Engineer to join the VMS Team Ovr. You will guide security across the product lifecycle, perform threat modeling, and lead secure coding practices to strengthen our devices and software.

You will collaborate with engineering on secure development, implement SAST/DAST/SCA tooling, and help scale security through automation and cloud best practices.