Product Security Engineer

🔥 3 hours ago

🇸🇰 Slovakia – Remote

💵 €28.1k - €35.1k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Bloomreach

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💼 Consulting

📣 Marketing

✈️ Travel

💰 $30M Debt Financing on 2022-10

Consulting • Marketing • Travel

Bloomreach is a leader in ecommerce personalization solutions, providing platforms that integrate real-time customer and product data via AI. The company offers marketing automation, product discovery, and a unified data platform specifically designed for commerce applications. This enables businesses to personalize marketing efforts across multiple channels such as email, SMS, and web, optimize ecommerce search and merchandising, and manage customer and product data for advanced analytics and omnichannel personalization. Bloomreach’s solutions cater to various industries including retail, travel, hospitality, and more, to enhance profitability and customer retention.

📋 Description

• Act as the designated security focus on a specific product domain • Drive threat modeling, security assessments, and vulnerability management across Bloomreach's platform • Support implementation and adoption of Secure Software Development Lifecycle practices across engineering teams • Review application designs, system architectures, and infrastructure components to identify security risks and recommend mitigations • Participate in threat modeling for new and existing products; identify threats, assess risk, and document recommendations • Provide security guidance to product and engineering teams using established standards, patterns, and best practices • Conduct security assessments, penetration testing, and validation testing across applications and environments • Triage, validate, assign, and support remediation of vulnerabilities • Collaborate with Engineering, DevOps, Compliance, and other cross-functional teams • Serve as a security point of contact for routine security questions and activities • In the first 30 days, learn Bloomreach products, architecture, services, policies, tools, and security workflows; establish partner relationships • In the first 60 days, contribute to penetration tests and assessments, threat modeling, vulnerability triage, validation, and remediation recommendations • In the first 90 days, independently perform defined assessments, contribute to threat modeling, communicate findings, support remediation, provide routine security guidance, own assigned activities, and improve processes, documentation, tooling, or workflows

🎯 Requirements

• 2+ years of hands-on experience in cybersecurity, application security, product security, or a related security discipline • Practical experience performing or supporting security assessments and penetration testing of web applications • Familiarity with threat modeling concepts and methodologies such as STRIDE • Understanding of vulnerability management fundamentals, including validation, risk-based prioritization, remediation tracking, and retesting • Exposure to AI and LLM technologies, with interest in associated security risks and controls • Working knowledge of modern application architectures, APIs, authentication and authorization mechanisms, and common application security considerations • Knowledge of OWASP standards and resources, including OWASP Top 10, Testing Guide, and secure development practices • Hands-on experience with or familiarity with Burp Suite, OWASP ZAP, Nmap, SAST/SCA tools, and other application security technologies • Ability to analyze and validate security findings and prioritize vulnerabilities based on technical risk and business context • Strong communication skills and ability to document findings and communicate technical concepts • Self-motivated and proactive; willing to learn, take ownership, and contribute to process improvements • Ability to collaborate with Security, Engineering, DevOps, and other cross-functional teams • Continuous learning mindset and interest in emerging technologies and threats • Excellent command of English, including listening, speaking, reading, and written communication

🏖️ Benefits

• A great deal of freedom and trust; no clocking in and out, corporate rules, or long approval processes • Flexible working hours • Virtual-first work with Bloomreach Hubs across three continents • Company events • 5 paid days off to volunteer • People Development Program with personal development workshops • Communication coach support • $1,500 annual professional education budget for books, courses, certifications, etc. • Employee Assistance Program with counselors • Calm subscription • One additional DisConnect day off each quarter • Sports, yoga, and meditation opportunities • Extended parental leave up to 26 calendar weeks for Primary Caregivers • Restricted Stock Units or Stock Options, depending on role, seniority, and location • Company performance bonus • Employee referral bonus of up to $3,000 • Work anniversary rewards and celebrations

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume