Principal Engineer, Product Security

About the role

Commercetools is looking for a Principal Engineer, Product Security to support its Engineering team by solving challenging technical problems and helping teams shift left to build secure services on multi-cloud infrastructure. The role is hybrid, with three days a week in the Berlin, London or Valencia office.

Key responsibilities

• Formulate, evangelise and drive adoption of the product security strategy, and assess and raise the security maturity posture
• Create a standardised security architecture and operational best practices, and embed security tooling into the development process
• Track and drive remediation of security and technology risks, and triage and investigate new attack vectors
• Educate product teams on risk assessments, threat modelling and building secure API-first applications, and review requirements and designs
• Contribute to the review of external penetration tests and help teams prioritise fixes
• Lead customer conversations on product security and support certification audits
• Work with Product Management, Principal Engineers and legal/compliance teams, and identify skills gaps and knowledge-sharing needs

Required profile

• Strong technical background with 5+ years of hands-on Product Security and 2+ years in a leadership role
• Customer-facing security experience and influence in matrix organisations, in a scale-up environment
• Experience with secure architecture design reviews, threat modelling and security throughout the SDLC
• Project management experience for multi-team projects and an Agile mindset
• Experience setting up trainings or onboarding sessions, and fluent written and spoken English

Required skills

• Linux, Kubernetes, Terraform, Vault, API and web application security
• DevSecOps and at least one scripting language such as JavaScript or Go
• Nice to have: CISSP, CCSP or cloud security certifications

What we offer

• Health benefits for you and your dependents, including mental health support
• Learning budget, self-paced platforms, language training, coaching, mentorship and leadership programmes
• Additional fully paid parental leave weeks
• Equity participation programme