Principal Engineer, Product Security

About the role

The Principal Engineer, Product Security will support the engineering team by solving challenging technical problems and enabling teams to build secure services on multi-cloud infrastructure. This role involves formulating and driving the product security strategy, assessing security maturity, and fostering a culture of security across the organization. You will collaborate with product management and engineering teams to ensure secure architecture and operational best practices.

Responsibilities

• Formulate, evangelise, and drive adoption of the product security strategy
• Assess, advise on, and increase the security maturity posture
• Create a standardised security architecture and operational best practices
• Help track and drive remediation of security and technology risks
• Educate product teams on risk assessments, threat modelling, and building secure api-first applications
• Review requirements and designs to help product teams address shortcomings
• Embed security tooling into the development process
• Contribute to the review of external penetration tests and help teams prioritise fixes
• Collaborate with product teams to improve overall security and resolve specific issues
• Facilitate or lead customer conversations regarding product security
• Triage and investigate new attack vectors to determine risk mitigation
• Drive security and quality initiatives across the organization and support certification audits
• Collaborate with Product Management, Principal Engineers, and legal/compliance teams
• Identify skills gaps and facilitate knowledge sharing across the organization

Required skills

• Product Security
• Secure Architecture
• Threat Modeling
• SDLC
• Static Analysis
• Secure Code Review
• Linux
• Kubernetes
• Terraform
• Vault
• API Security
• Web application security
• DevSecOps
• JavaScript
• Go

Qualifications

• 5+ years of proven track record in hands-on Product Security
• 2+ years of experience improving Product Security in a leadership role

Certifications

• CISSP
• CCSP
• Certified Kubernetes Security Specialist
• GCP security certification
• AWS security certification
• Azure security certification

Benefits

• Comprehensive health benefits
• Mental health support
• Annual learning budget
• Language training
• Personalized coaching
• Mentorship programs
• Leadership programs
• Family Leave Plus
• Equity participation program

About the Company

Commercetools powers the next era of commerce for customers through AI-driven solutions and flexible commerce architecture. They enable ambitious companies to experiment, scale, and grow by bridging digital and physical shopping experiences.