Remote Jobs RockRemote Jobs Rock

Principal Product Security Engineer

📅 Sep 10
Product SecurityApplication SecuritySecurity EngineeringSecurity Architecture
Apply Now

📜 Description

  • Collaborate with engineers, architects, and product teams to address security challenges with pragmatic solutions.
  • Mentor engineers and Security Champions to embed security within the engineering culture.
  • Build and enable security automation to enhance security outcomes and reduce friction for teams.
  • Lead threat modeling and security architecture reviews to identify potential issues early.
  • Define security principles and standards to facilitate secure engineering practices.

🛠️ Requirements

  • 5+ years of experience in Product Security, Application Security, or Security Engineering.
  • Strong experience in security architecture and threat modeling.
  • Deep technical knowledge of application and API security, secure development practices, and cloud-native systems.
  • Experience embedding security controls into engineering workflows and software supply chains.
  • Excellent communication skills to influence engineers and senior technical leaders.
Full job description

Make Your Mark as an Principal Product Security Engineer at Storio group

About the role.

You will be based in our Amsterdam office, where you will help shape how security is built into our ecommerce platform and engineering organisation. This is a senior individual contributor role operating at the intersection of Product Security and Application Security. You will work directly with engineers, architects, and product teams to solve complex security problems, influence technical decisions, and make secure-by-design engineering the standardnorm. You will have significant autonomy and influence to establish practical security standards, raise security capability across teams, and guide the secure adoption of AI across our engineering ecosystem.

How you embrace curiosity daily.

  • You collaborate closely with engineers, architects, and product teams to find turn security challenges into pragmatic solutions for security challenges.
  • You mentor engineers and Security Champions to make security increasingly embedded within engineering culture.
  • You build and enable security automation that improves security outcomes while reducing friction for engineering teams.

  • You lead threat modelling and security architecture reviews for key products and technology initiatives to identify problems early.

  • You experiment with and adopt AI tools creatively to automate security engineering workflows and boost productivity.

  • How you make your mark.

  • You define security principles, standards, patterns, and guardrails that enable engineers to build securely at pace.
  • You shape the strategic technical direction of Product Security across our entire platform and engineering organisation.

  • You protect our platform by providing hands-on expertise across APIs, microservices, cloud infrastructure (AWS), authentication, authorisation, and software supply chain security.

  • You identify and mitigate emerging security risks,including those introduced by AI, and communicate potential impact clearly to senior stakeholders.

  • You measure what matters by developing meaningful Product Security metrics to continuously drive security posture improvements.

  • What you bring to the team.

  • You bring significant (5+ years) experience in Product Security, Application Security, or Security Engineering within a modern software environment.
  • You have strong experience in security architecture and threat modelling, with a proven ability to turn risk into practical engineering solutions.

  • You possess deep technical knowledge of application and API security, secure development practices, modern software architectures, and cloud-native systems.

  • You bring experience embedding security controls into engineering workflows, software supply chains (SBOMs), and the broader software development lifecycle.

  • You are an excellent communicator who builds trust and influences engineers, architects, and senior technical leaders without relying on direct authority.

  • You have experience with, or a strong interest in, AI security and leveraging AI tools to advance security engineering.

  • What sets you apart.

  • You have hands-on experience with Infrastructure as Code (IaC) security, scaling Security Champions programs, or managing Bug Bounty programs.
  • You hold relevant industry or cloud security certifications (e.g., CISSP, CSSLP, AWS Security Specialty), though we care far more about your practical impact than the certificates you hold.

  • Pepperstone

    Application Security Engineer

    🕒 4 days ago
    Pepperstone🏢 Financial Services

    Embed security across the software development lifecycle by assessing applications and APIs, integrating security into delivery pipelines, and guiding engineering teams toward secure design and remediation.

    Application SecurityThreat ModellingSecure Code ReviewPenetration Testing
    Kaufman Rossin

    System Security Engineer

    🕒 yesterday
    Kaufman Rossin👥 501 - 1000 employees🏢 Accounting

    Administer and improve cybersecurity detection and protection technologies, guide security practices across IT and application development, and help reduce organizational risk through threat response and security documentation.

    CybersecuritySecurity OperationsEndpoint ProtectionEndpoint Detection And Response (edr)
    PROTIVITI

    Pentester Sênior

    🕒 3 days ago
    PROTIVITI🏢 Professional Services🤝 B2B

    Na Protiviti, não importa de onde você vem, qual é o seu gênero, sua raça, sua orientação sexual ou se você é uma pessoa com deficiência. A diversidade torna nosso ambiente mais vivo, colaborativo e produtivo, nos desafia a pensar fora.

    Pentest De InfraestruturaActive DirectoryPentest De Aplicações WebPentest De APIs
    NetSecurity

    Especialista de Segurança da Informação - Complexidade alta

    🕒 4 days ago
    NetSecurity👥 51 - 200 employees🏢 Information Technology And Services

    Especialista de Segurança da Informação que presta suporte avançado a clientes, executa projetos de segurança e apoia pré-vendas com demonstrações, provas de conceito e orientação técnica à equipe de operações.

    Segurança Da InformaçãoSuporte TécnicoNOCSOC
    OpenAI

    Enterprise Security Engineer, Vulnerability Management

    🕒 4 days ago
    OpenAI👥 10,000+ employees🏢 Research Services

    Investigate and prioritize enterprise vulnerabilities, including zero-days, then coordinate mitigations and verified remediation while building security automation and controls for AI agents.

    Vulnerability ManagementZero-day ResponseEnterprise SecurityNetwork Security

    Trusted by Remote Workers