Principal Engineer, Product Security

About the role

The Principal Engineer, Product Security will support the engineering team by solving complex technical problems and enabling teams to build secure services on multi-cloud infrastructure. This role involves formulating and driving the product security strategy, improving security maturity, and fostering a culture of security across the organization. You will collaborate with product management, engineering leadership, and compliance teams to ensure secure, scalable commerce solutions.

Responsibilities

• Formulate, evangelise, and drive adoption of the product security strategy
• Assess, advise on, and increase the security maturity posture
• Create a standardised security architecture and operational best practices
• Help track and drive remediation of security and technology risks
• Educate product teams on risk assessments, threat modelling, and building secure api-first applications
• Review requirements and designs to help product teams address shortcomings
• Embed security tooling into the development process
• Contribute to the review of external penetration tests and help teams prioritise fixes
• Collaborate with product teams to improve overall security and resolve specific issues
• Facilitate or lead customer conversations regarding product security
• Triage and investigate new attack vectors to determine risk mitigation
• Drive security and quality initiatives across the organization and support certification audits
• Collaborate with Product Management, Principal Engineers, and legal/compliance teams
• Identify skills gaps and facilitate knowledge sharing across the organization

Required skills

• Product Security
• Secure Architecture
• Threat Modeling
• SDLC
• Static Analysis
• Secure Code Review
• Linux
• Kubernetes
• Terraform
• Vault
• API Security
• Web application security
• DevSecOps
• JavaScript
• Go

Nice to have

• Leadership

Certifications

• CISSP
• CCSP
• Certified Kubernetes Security Specialist
• GCP security certification
• AWS security certification
• Azure security certification

Benefits

• Health benefits
• Mental health support
• Annual learning budget
• Language training
• Personalized coaching
• Mentorship
• Leadership programs
• Parental leave
• Equity participation program

About the Company

Commercetools is a commerce architecture company that powers the next era of commerce for enterprises through AI-driven solutions and flexible infrastructure. They foster a culture of experimentation and believe in building a team that reflects the world around them.