Aktuelle Jobs im Zusammenhang mit Lead Product Security Engineer - Munich, Bayern - commercetools

  • Cloud Lead Engineer

    vor 3 Wochen


    Munich, Bayern, Deutschland Riverland Reply Vollzeit

    Job DescriptionRiverland Reply is seeking a highly skilled Cloud Lead Engineer to join our team. As a Cloud Lead Engineer, you will be responsible for designing, implementing, and managing cloud-based systems and infrastructure.Key Responsibilities:Design and implement cloud-based systems and infrastructureManage and maintain cloud-based systems and...

  • Cloud Lead Engineer

    vor 3 Wochen


    Munich, Bayern, Deutschland Riverland Reply Vollzeit

    Job DescriptionRiverland Reply is seeking a highly skilled Cloud Lead Engineer to join our team. As a Cloud Lead Engineer, you will be responsible for designing, implementing, and managing cloud-based systems and infrastructure.Key Responsibilities:Design and implement cloud-based systems and infrastructureManage and maintain cloud-based systems and...


  • Munich, Bayern, Deutschland Celonis Vollzeit

    About the RoleCelonis is seeking a highly skilled Security Automation Engineer to join our team. As a Security Automation Engineer, you will play a critical role in designing, building, and deploying automation at scale that improves Celonis's production security infrastructure.You will work closely with our infrastructure team as the subject matter expert...


  • Munich, Bayern, Deutschland Celonis Vollzeit

    About the RoleCelonis is seeking a highly skilled Security Automation Engineer to join our team. As a Security Automation Engineer, you will play a critical role in designing, building, and deploying automation at scale that improves Celonis's production security infrastructure.You will work closely with our infrastructure team as the subject matter expert...


  • Munich, Bayern, Deutschland OSB AG Vollzeit

    Job Title: Local Security Monitoring EngineerJoin OSB AG as a Local Security Monitoring Engineer and contribute to the security and integrity of our systems.About the Role:We are seeking a highly skilled and experienced Local Security Monitoring Engineer to join our team. As a key member of our Security and Operations (SPO) Technical Team, you will be...


  • Munich, Bayern, Deutschland Boeing Vollzeit

    Electrical Engineer Lead Job DescriptionBoeing is seeking an experienced Electrical Engineer Lead to join our team in Hamburg or Munich, Germany. As an Electrical Engineer Lead, you will be responsible for guiding and leading the design and certification of complex large aircraft modifications for our global airline partners.Key Responsibilities:Reporting to...


  • Munich, Bayern, Deutschland Proofpoint Vollzeit

    About the RoleWe are seeking a highly skilled Cybersecurity Sales Engineer to join our team at Proofpoint. As a key member of our sales team, you will be responsible for developing and executing targeted account penetration strategies, designing and championing complex People-Centric Security solutions, and providing valuable customer insight and real-world...


  • Munich, Bayern, Deutschland Proofpoint Vollzeit

    About the RoleWe are seeking a highly skilled Cybersecurity Sales Engineer to join our team at Proofpoint. As a key member of our sales team, you will be responsible for developing and executing targeted account penetration strategies, designing and championing complex People-Centric Security solutions, and providing valuable customer insight and real-world...


  • Munich, Bayern, Deutschland Google Vollzeit

    Job SummaryWe are seeking a highly skilled Security Engineer to join our team at Google. As a Security Engineer, you will play a critical role in creating and maintaining the safest operating environment for our users and developers.Key ResponsibilitiesIdentify and mitigate security risks in our hardware and firmware systems.Design and implement security...


  • Munich, Bayern, Deutschland Google Vollzeit

    Job SummaryWe are seeking a highly skilled Security Engineer to join our team at Google. As a Security Engineer, you will play a critical role in creating and maintaining the safest operating environment for our users and developers.Key ResponsibilitiesIdentify and mitigate security risks in our hardware and firmware systems.Design and implement security...


  • Munich, Bayern, Deutschland Wemolo GmbH Vollzeit

    About Wemolo GmbHWe are a leading parking platform in Europe, revolutionizing the traditional parking industry through digitalization. Our formula is simple: a motivated team with a focus on technology and customer friendliness, combined with high ambitions, drives us to success and rapid growth. Are you part of our team?Job DescriptionAs a Lead IoT System...


  • Munich, Bayern, Deutschland Wemolo GmbH Vollzeit

    About Wemolo GmbHWe are a leading parking platform in Europe, revolutionizing the traditional parking industry through digitalization. Our formula is simple: a motivated team with a focus on technology and customer friendliness, combined with high ambitions, drives us to success and rapid growth. Are you part of our team?Job DescriptionAs a Lead IoT System...


  • Munich, Bayern, Deutschland MAM Gruppe Vollzeit

    Job Title: Information Security Lead ConsultantAt MAM Gruppe, we're seeking a highly skilled Information Security Lead Consultant to join our innovative team. As a key member of our InfoSec division, you'll play a crucial role in developing and maintaining information security management systems compliant with ISO/IEC 27001 and TISAX standards.Key...


  • Munich, Bayern, Deutschland MAM Gruppe Vollzeit

    Job Title: Information Security Lead ConsultantAt MAM Gruppe, we're seeking a highly skilled Information Security Lead Consultant to join our innovative team. As a key member of our InfoSec division, you'll play a crucial role in developing and maintaining information security management systems compliant with ISO/IEC 27001 and TISAX standards.Key...

  • Lead DevOps Engineer

    vor 4 Wochen


    Munich, Bayern, Deutschland Riverland Reply Vollzeit

    Riverland Reply is seeking a talented and experienced DevOps Engineer to join our growing team. We specialize in providing cutting-edge technology solutions to clients across various industries, including automotive, transportation, logistics, and finance. As a DevOps Engineer, you will play a crucial role in designing, implementing, and maintaining our...

  • Lead DevOps Engineer

    vor 2 Monaten


    Munich, Bayern, Deutschland Riverland Reply Vollzeit

    Riverland Reply is seeking a talented and experienced DevOps Engineer to join our growing team. We specialize in providing cutting-edge technology solutions to clients across various industries, including automotive, transportation, logistics, and finance. As a DevOps Engineer, you will play a crucial role in designing, implementing, and maintaining our...


  • Munich, Bayern, Deutschland Celonis Vollzeit

    We're looking for a talented Security Automation Engineer to join our team at Celonis. As a Security Automation Engineer, you will work directly with our cloud platform to help engineer the next generation platform infrastructure stack. You will need to have hands-on experience in developing cloud systems at scale, a solid understanding of security controls,...


  • Munich, Bayern, Deutschland Darktrace Vollzeit

    About DarktraceDarktrace is a global leader in cyber security AI, delivering complete AI-powered solutions in its mission to free the world of cyber disruption. We protect more than 9,000 customers from the world's most complex threats, including ransomware, cloud, and SaaS attacks.Our roots lie deep in innovation. The Darktrace AI Research Centre based in...


  • Munich, Bayern, Deutschland Darktrace Vollzeit

    About DarktraceDarktrace is a global leader in cyber security AI, delivering complete AI-powered solutions in its mission to free the world of cyber disruption. We protect more than 9,000 customers from the world's most complex threats, including ransomware, cloud, and SaaS attacks.Our roots lie deep in innovation. The Darktrace AI Research Centre based in...


  • Munich, Bayern, Deutschland OSB AG Vollzeit

    Job DescriptionOSB AG is seeking a highly skilled Security Monitoring Engineer to join our team.Key ResponsibilitiesSupport the Security Monitoring Manager in the activities of the Security and Operations domain.Participate in the management of Galileo's SECMON processes, including security monitoring and control activities.Verify and control activities...

Lead Product Security Engineer

vor 2 Monaten


Munich, Bayern, Deutschland commercetools Vollzeit

The Opportunity:

As we expand our engineering team beyond 100 professionals, we are establishing a tech leadership pathway to facilitate further growth. In the role of Principal Engineer for Product Security, you will have the unique opportunity to define the position and cultivate the tech leadership culture alongside the Director of Tech Leadership.

In this pivotal role, you will tackle complex technical challenges associated with our innovative product. Our commerce APIs manage sensitive information, including customer accounts and orders, while the Merchant Center, our administrative tool, features an intricate permission model built on our APIs. Your efforts will empower product teams to adopt security measures early in the development process, ensuring they can construct secure services within a multi-cloud environment.

Your Mission:

  • Develop a cohesive security framework and operational best practices, particularly for new services and teams.
  • Train product teams on conducting risk assessments, threat modeling, and designing secure applications, including API-first products.
  • Evaluate requirements and application designs, assisting product teams in addressing any identified deficiencies.
  • Facilitate the integration of SAST, DAST, and SCA tools into the development lifecycle.
  • Organize external penetration tests and guide teams in rectifying identified vulnerabilities.
  • Collaborate with development teams to resolve security challenges and enhance overall security posture.
  • Rapidly investigate new attack vectors to assist teams in implementing suitable security controls to mitigate risks.
  • Support teams during audits related to our certifications.
  • Identify training needs and skills gaps, promoting security knowledge sharing across the organization with the help of our internal knowledge management team.
  • Initiate improvements that impact multiple teams to enhance our Product Security and bring colleagues' ideas to fruition.
  • Lead organizational communication on long-term initiatives, ensuring successful adoption.
  • Work closely with Product Management, fellow Principal Engineers, the Head of Engineering, as well as legal and compliance teams.
  • Contribute to the evolution of our technical vision and advocate for it within the organization.

What you need to succeed:

  • A robust technical background with a proven history in a hands-on Product Security role (5+ years).
  • Experience enhancing Product Security in a leadership capacity (2+ years).
  • Proficiency in Secure Architecture design reviews and Threat Modeling.
  • Experience embedding Security at various stages of the Software Development Life Cycle (SDLC).
  • Familiarity with Static Analysis and Secure Code Review Implementations for early detection of security vulnerabilities in the SDLC.
  • Strong knowledge of Linux systems, Kubernetes, Terraform, Vault, API, and web application security.
  • Relevant Security Certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certification.
  • Practical experience in DevSecOps, including proficiency in at least one scripting language (e.g., JavaScript, Go).
  • Ability to analyze security issues alongside related organizational challenges.
  • Project management experience, particularly for initiatives involving multiple teams.
  • Experience in an Agile environment with a strong focus on customer needs.
  • Experience in setting up and conducting training sessions.
  • Excellent written and verbal communication skills.
  • Proficiency in English to operate effectively in an international context.
  • Strong self-assessment capabilities.
  • A commitment to sharing knowledge and a desire for continuous improvement and learning about leadership, new technologies, and concepts.

We care about your growth and well-being

Competitive Compensation Package: A generous compensation structure that includes salary, a competitive stock option package, and various benefits and perks.

Workation: The opportunity to work up to 60 days per year in a country different from your home country.

Learning & Development Budget

Academy: Regular training sessions, access to Coursera and Babbel training courses.

Our Benefits: Explore the benefits available at our offices.

Flexibility: Whether you are a morning person or a night owl, we believe in outcomes and motivated employees.

Mindset & Growth: A diverse workplace with an open, international culture and a commitment to learning.

Come grow with us

We celebrate diversity and are proud to be an equal opportunity employer. We value candidates from a wide variety of backgrounds, as it enriches our company.

At commercetools, we are committed to assessing competencies, future potential, learning approaches, and passion, rather than age, color, national origin, religion, gender, gender identity or expression, sexual orientation, familial status, genetics, or disability.