Senior Product Security Engineer

About the role

The Product Security team at Staffbase works to secure products and customer data while enabling engineering teams. As an enablement team, you will provide tools, guidance, and insights to help developers integrate security early in the development process. You will have the opportunity to work with modern security practices and make a visible impact in a global SaaS environment.

Responsibilities

• Take ownership of tasks that improve our security automation and strengthen our product security pipelines
• Proactively explore the use of AI for vulnerability detection and remediation
• Continuously learn and share knowledge about how vulnerabilities apply in our specific product context
• Support the team by enhancing our services with software engineering solutions
• Collaborate closely with stakeholders across the product department
• Maintain our outbound e-mail security by regularly reviewing the related metrics
• Maintain our Web Application Firewall ruleset
• Manage Kubernetes and CI/CD pipeline security
• Maintain our central HTML sanitization service written in TypeScript

Required skills

• Penetration testing
• Secure software development
• Vulnerability management
• SAST
• DAST
• TypeScript
• JavaScript
• Kotlin
• Java
• Go
• Python
• Unix
• Kubernetes
• Terraform
• Kustomize

Nice to have

• German

Benefits

• Long Term Incentive Plan
• Flexible working time models
• Flex work allowance
• 31 vacation days
• Company pension scheme
• Volunteers Day

About the Company

Staffbase is an AI-native Employee Experience Platform that helps organizations unlock the power of inspirational communication. Headquartered in Chemnitz and New York City, the company supports over 1,500 customers and is a unicorn company valued at over $1 billion.