Staff Security Engineer

Roman Health Pharmacy LLC; Berlin (VT); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid work structure

30‑day holiday allowance

€1,000 annual learning budget

Insurance – travel/Disability

Gym membership

Family leave support

Mental Health Platform

Pet-friendly office

Job summary

PPRO is seeking a Staff Security Engineer to lead its Security Engineering team, driving secure-by-design practices across applications and cloud environments. You will collaborate with engineers to embed security into the SDLC, build reusable Security as Code artefacts, and perform threat modeling and security assessments.

You’ll champion AI to enhance security operations, guide architecture decisions, and ensure scalable security controls across the payments ecosystem.

Qualifications

• Experience leading security engineers and cross-team collaboration.
• Deep security expertise across applications and cloud domains.
• Proven ability to implement secure-by-design patterns.
• Strong knowledge of DevSecOps practices.

Responsibilities

• Act as technical lead for the Security Engineering team, setting technical direction, coaching and mentoring other security engineers.
• Partner with Engineering teams to integrate security principles, practices, and tools into all stages of the software development lifecycle.
• Design and build reusable Security as Code artefacts and patterns that reduce developer friction while improving security outcomes.
• Conduct threat modeling exercises and security assessments to identify and address risks in critical applications and systems.
• Write Hardening Standards and Security Guidelines for various technologies and processes.
• Develop automations for recurrent and manual tasks around auditing activities, cloud security posture management (CSPM) and other security processes.
• Maintain and expand our IaC codebase and CI/CD pipelines.
• Champion the use of AI to streamline security operations, scaling our defensive capabilities and enabling non-security teams to adopt security-first practices.
• Collaborate on cross-functional security projects, enhancing PPRO’s security posture at scale.
• Continuously monitor emerging security trends and technologies to drive proactive improvements.

Skills

AWS security

Kubernetes

Terraform

CI/CD security

Python

Tools

GitHub Actions

Job description

At PPRO, our mission is to simplify access to local payment methods and our vision is to enable the sale of goods and services to anyone in the world using their preferred way to pay. We empower partners such as Ant Group, PayPal and Stripe to access new markets, connect with more customers, and accelerate their growth.

Our strength lies in our diverse global team with 50+ nationalities and 10+ international locations - united around one goal: to deliver the best possible products and services to our partners and customers. While our company mission is to keep innovating global commerce, our internal mission is to #chooseaction, #beopen, #thinkcustomer, #gofurther and #wintogether.

The Purpose:

As Staff Security Engineer at PPRO, you’ll act as the technical lead for the Security Engineering (SecEng) team, driving technical and operational excellence while coaching and developing your colleagues. You’ll be pivotal in supporting our mission to build robust, secure, and resilient systems.

This role offers the opportunity to apply deep security expertise across application and cloud domains. You will serve as the primary technical interface between the SecEng team and engineers across the organisation, influencing architecture and guiding teams to embed a "secure by design" philosophy in everything we build. You will build Security as Code solutions that enable consistent controls and high-velocity delivery. You will also perform security assessments for new projects and technologies, utilizing threat modeling to identify risks early and define standardized, repeatable security patterns for the wider engineering organization. If you thrive on finding win-win solutions that embed security into modern development workflows to safeguard our customers, this is a great opportunity to have a positive impact at scale across the payments ecosystem.

What you’ll do:

• Act as technical lead for the Security Engineering team, setting technical direction, coaching and mentoring other security engineers.
• Partner with Engineering teams to integrate security principles, practices, and tools into all stages of the software development lifecycle.
• Design and build reusable Security as Code artefacts and patterns that reduce developer friction while improving security outcomes.
• Conduct threat modeling exercises and security assessments to identify and address risks in critical applications and systems.
• Write Hardening Standards and Security Guidelines for various technologies and processes.
• Develop automations for recurrent and manual tasks around auditing activities, cloud security posture management (CSPM) and other security processes.
• Maintain and expand our IaC codebase and CI/CD pipelines.
• Champion the use of AI to streamline security operations, scaling our defensive capabilities and enabling non-security teams to adopt security-first practices.
• Collaborate on cross-functional security projects, enhancing PPRO’s security posture at scale.
• Continuously monitor emerging security trends and technologies to drive proactive improvements.

What we look for in you:

• A natural technical leader: able to guide, coach and mentor engineers, lead cross-team collaborations, and act as a trusted interface between security and the wider engineering organisation.
• You view AI as an essential force multiplier; you are a power user who actively leverages modern AI/LLM frameworks to both accelerate your own workflows and build scalable security solutions.
• Solid understanding of software engineering fundamentals, secure software development best practices, and security architecture.
• Strong expertise in AWS (GCP is a bonus) and container security (e.g. Kubernetes).
• Deep understanding of DevSecOps and CI/CD security controls, with hands‑on experience in Infrastructure as Code (preferably Terraform), CI/CD pipelines (preferably GitHub Actions) and scripting (Python, bash).
• Results‑oriented, highly collaborative, pragmatic and proactive, and with a continuous improvement mindset.
• Strong interpersonal and communication skills, able to unblock teams and foster security awareness throughout the company.

What's in it for you?

• Hybrid working – We offer a hybrid structure with a 3 days / week on-site expectation.
• 30‑day holiday allowance and a work‑from‑abroad policy, enabling employees to work remotely for up to another 30 days per year.
• Learning and Development – €1,000 annual budget to support your professional growth, leadership cafés, on‑the‑job training, and other opportunities.
• Insurance – accident, disability, direct insurance (bAV) and travel insurance.
• Gym membership – contribution toward the costs of your gym membership.
• Enhanced family leave – support you during key life moments.
• Mental Health Platform – one‑on‑one therapy, chat therapy, therapist‑led courses, guided meditations, and more.
• Pet‑friendly office – because work is better with your paw‑tners by your side.

Our Principles:

• We get things done: We are courageous; we take ownership, make decisions and get things done.
• We act with trust and integrity: We listen first and challenge respectfully. We seek out and leverage diverse perspectives. We welcome and offer honest and open feedback, always assuming positive intent.
• We put the customer first: We are laser focused on delivering outstanding outcomes for our customers. We put the customer at the heart of what we do.
• We make things better: We boldly explore new ideas and have an unwavering commitment to continuous improvement.
• We work as a team: We collaborate closely and value team success over individual achievement.