Senior Product Security Engineer: Secure by Design with AI

payabl.; Lisboa; Presencial; EUR 90 000 - 120 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Provident Fund

Annual Learning Budget

Wolt allowance

SportsBenefits membership

Company car after 1 year

Complimentary parking

25 days vacation + holidays + 10 sick

Discount card + events

Greek language classes

Company celebrations

Global collaboration & events

Resumo da oferta

payabl. is seeking a Senior Product Security Engineer to embed security directly into our software development lifecycle across card issuing and fintech services.

You will design security gates, lead threat modelling, and implement SAST/SCA/DAST tooling while guiding engineers toward secure releases. Reporting to the Head of Information Security, you will own CI/CD security, software supply-chain controls, and AI‑assisted automation to scale secure product delivery from design to deployment in

Qualificações

• 5+ years of experience in Product Security, Application Security, Security Engineering, or a closely related software security role
• Strong hands-on experience embedding security into the software development lifecycle
• Proven experience with threat modelling, secure-by-design reviews, and working with engineers during architecture and delivery stages
• Hands-on experience with application security tooling such as SAST, SCA, secrets detection, and DAST
• Experience securing CI/CD pipelines and improving software supply-chain security
• Ability to work directly with engineering teams and influence secure delivery in practice
• Strong ownership mindset — able to define, implement, improve, and drive adoption of security practices across multiple teams
• Strong written and verbal English

Responsabilidades

• Design and introduce security gates into the development lifecycle, including security requirements at design stage
• Lead threat modelling for new products and major changes
• Introduce security review practices into the pull‑request flow
• Provide secure-by-design input for new product builds across card issuing and fintech services
• Select, deploy, and operate application security tooling across SAST, SCA, secrets detection, and DAST
• Decide pragmatically where traditional tooling is the right fit and where AI-assisted alternatives provide better coverage
• Build AI-assisted secure code review and finding triage into the engineering workflow
• Own CI/CD pipeline and software supply-chain security controls across engineering teams
• Implement and improve container image scanning, dependency management, SBOM, and security checks on IaC and deployment manifests
• Help ensure secure release practices are embedded in the way software is built and deployed
• Operate and maintain the group’s Product Security Requirements as a living standard
• Drive remediation of application-layer findings with engineering teams
• Define realistic SLAs, track remediation ageing, and provide honest reporting
• Build product security awareness and capability across engineering through training and reviews
• Apply AI and automation to day-to-day product security work
• Help extend security review coverage across teams without friction

Conhecimentos

Security engineering

Threat modelling

CI/CD security

AppSec tooling

SAST

SCA

DAST

Security in SDLC

Ferramentas

SAST

SCA

DAST

Secrets detection

Container security

Kubernetes security

Descrição da oferta de emprego

payabl. is seeking a Senior Product Security Engineer to embed security directly into our software development lifecycle across card issuing and fintech services.

You will design security gates, lead threat modelling, and implement SAST/SCA/DAST tooling while guiding engineers toward secure releases. Reporting to the Head of Information Security, you will own CI/CD security, software supply-chain controls, and AI‑assisted automation to scale secure product delivery from design to deployment in