Product Security Engineering Lead (Remote)

shopware AG; United States; Hybrid; USD 124,000 - 169,000; Full time

Benefits offered by this job

Company Culture

Permanent contract

Flexible working hours

Equipment allowance

Structured onboarding

Dynamic work environment

Development opportunities

Additional benefits

Job summary

Shopware AG is seeking a Security Engineering Lead to establish and lead a durable product security capability across Shopware products. You will own risk-based roadmaps, triage external reports, and collaborate with domain owners and InfoSec to drive timely remediation.

The role requires hands-on engineering, threat modeling, and mentoring a small team. As a key partner to Engineering, Product Operations, and Legal, you will shape secure design practices, incident readiness, and policy

Qualifications

• Strong hands-on software engineering experience in production systems.
• Practical application-security knowledge across authentication, authorization, data isolation, API security and vulnerability classes.
• Experience investigating vulnerability reports and turning findings into remediation plans.
• Ability to work directly in code and tests; familiarity with security tooling (SAST, dependency scanning, fuzzing).
• Sound judgment on exploitability, severity, disclosure and incident response.
• Clear technical writing and calm cross-functional leadership during urgent work.
• Experience mentoring engineers or leading a small technical team; leadership is essential.
• Familiarity with open-source products, extension ecosystems, cloud services, and multi-version release models.

Responsibilities

• Build and lead a risk-based product security roadmap across core products and services.
• Own the product-security intake and triage model for external reports, bug bounties, tests, and advisories.
• Stay hands-on: threat-model changes and review high-risk designs; implement or pair on high-leverage controls.
• Establish repeatable practices for secure design, security reviews, and vulnerability disclosure.
• Coordinate cross-product security work with governance records and communication channels.
• Assign technical owners and due dates to confirmed issues; escalate blocked remediation and residual risk.
• Improve security coverage across supported versions and related products; extend into plugins and extensions.
• Lead post-incident learning and convert root causes into prevention work with tests and tooling.
• Coach and develop engineers; maintain visibility of security work in planning.
• Partner with InfoSec, Product Ops, Quality Ops, DevRel, Legal, Support, and leadership on policy and release decisions.

Skills

hands-on software engineering

application security

threat modeling

security tooling

leadership

cross-functional collaboration

incident response

cloud services

Job description

Shopware AG is seeking a Security Engineering Lead to establish and lead a durable product security capability across Shopware products. You will own risk-based roadmaps, triage external reports, and collaborate with domain owners and InfoSec to drive timely remediation.

The role requires hands-on engineering, threat modeling, and mentoring a small team. As a key partner to Engineering, Product Operations, and Legal, you will shape secure design practices, incident readiness, and policy