Product Security Engineer: Lead Secure DevSecOps & Cloud

Iqsight; Aveiro; Hybrid; EUR 42,000 - 64,000; Full time

Benefits offered by this job

Flexible work conditions

Health insurance

On-site medical office

Training opportunities

Career progression

Global collaboration

Employee discounts

Job summary

Keenfinity is seeking a mid-level Product Security Engineer to join the VMS Team Ovr. You will guide security across the product lifecycle, performing threat modeling, vulnerability assessments, secure code reviews, and embedding security into development.

The role emphasizes DevSecOps, cloud security (AWS), PKI, and collaboration with engineering to integrate security into CI/CD and IaC. Flexible work and career opportunities offered.

Qualifications

• 3–5 years in product, application, or offensive security.
• Degree in Computer Science, Cybersecurity, or related field, or equivalent experience.
• Hands-on vulnerability assessment experience.
• Application security experience including secure code review and use of SAST/DAST/SCA tooling.
• Experience with threat modeling methodologies (e.g., STRIDE).
• Working knowledge of secure SDLC / DevSecOps and CI/CD security integration.
• Cloud security knowledge, particularly AWS, IAM and cloud security best practices.
• Solid understanding of PKI, digital certificates, and applied cryptography.
• Scripting and automation ability (e.g., Python) to build and scale security tooling.
• Familiarity with incident detection and response processes.
• Strong communication skills for working across development and project teams.

Responsibilities

• Provide security guidance on new products and technologies across the organization.
• Act as the security lead on development projects, embedding security throughout the product.
• Support development teams with DevSecOps practices, integrating security into CI/CD pipelines.
• Foster a shift-left security culture.
• Guide project teams through secure product lifecycle management and ongoing security support.
• Collaborate on regular product security assessments and threat modeling exercises.
• Perform application security assessments and secure code reviews across web, backend, and native codebases.
• Operate application security tooling (SAST, DAST, SCA), configuring scans and triaging findings.
• Triage, prioritize, and track identified vulnerabilities through remediation.
• Design and implement tools and automation to scale security processes.
• Assess and help secure cloud environments (AWS), reviewing configurations and IAM policies.

Skills

Vulnerability assessment

Threat modeling

DevSecOps

Cloud security

Python scripting

Security tooling

Education

Degree in Computer Science or Cybersecurity

Tools

SAST

DAST

SCA

AWS

Job description

Keenfinity is seeking a mid-level Product Security Engineer to join the VMS Team Ovr. You will guide security across the product lifecycle, performing threat modeling, vulnerability assessments, secure code reviews, and embedding security into development.

The role emphasizes DevSecOps, cloud security (AWS), PKI, and collaboration with engineering to integrate security into CI/CD and IaC. Flexible work and career opportunities offered.