Senior Product Security Engineer — AI-Driven Security

Staffbase; USA; Hybrid; USD 150.000 - 190.000; Vollzeit

Benefits dieser Stelle

Hybrid work options

Annual flex allowance

31 vacation days per year

Company pension scheme

Volunteer day

Zusammenfassung

Staffbase, a global SaaS company, is seeking a Senior Product Security Engineer to embed security across the SDLC. The role blends hands-on software engineering with security expertise, focusing on automation, AI-driven vulnerability detection, and pipeline hardening.

You will partner with engineering teams, maintain a central HTML sanitization service in TypeScript, manage WAF and email security, and advance Kubernetes/CI/CD hardening. English is required; German is a plus.

Qualifikationen

• Practical experience with penetration testing and secure software development.
• Experience in vulnerability management, SAST, and DAST.
• Strong programming skills in TypeScript/JavaScript/Kotlin/Java/Go/Python.
• Experience with Unix and Kubernetes, Terraform, and Kustomize.
• Excellent written and verbal English; German a plus.

Aufgaben

• Build and refine security automation for build and deployment pipelines.
• Prototype and evaluate AI-based vulnerability detection/remediation approaches.
• Maintain central HTML sanitization service in TypeScript.
• Operate WAF rule sets and review outbound email security metrics.
• Apply Kubernetes and CI/CD hardening across the infrastructure footprint.
• Share vulnerability knowledge with product engineering teams and advise during development.

Kenntnisse

Penetration testing

Secure SDLC

Vulnerability management

SAST

DAST

TypeScript/JavaScript

Java

Kotlin

Go

Python

Terraform

Kustomize

Kubernetes

CI/CD

Tools

Terraform

Kustomize

Kubernetes

CI/CD pipelines

Jobbeschreibung

Staffbase, a global SaaS company, is seeking a Senior Product Security Engineer to embed security across the SDLC. The role blends hands-on software engineering with security expertise, focusing on automation, AI-driven vulnerability detection, and pipeline hardening.

You will partner with engineering teams, maintain a central HTML sanitization service in TypeScript, manage WAF and email security, and advance Kubernetes/CI/CD hardening. English is required; German is a plus.