Senior Product Security Engineer

🕒 April 22

🇩🇪 Germany – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 75%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

n8n

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2019

💼 Consulting

📦 Logistics

🏭 Manufacturing

Consulting • Logistics • Manufacturing

n8n is a secure, AI-native workflow automation platform designed for technical teams. It provides limitless integrations and advanced AI features, allowing users to build autonomous, multi-step agents and workflows. With capabilities for IT, security, and sales operations, n8n can save significant time per workflow run and enrich various business processes using AI. It is available for self-hosting or on the cloud and is popular among developers for its open-source model and the ability to code in JavaScript or Python. n8n is enterprise-ready, offering advanced on-prem or cloud automation solutions, and maintaining mission-critical automations.

📋 Description

• Identify and reduce security risks across n8n’s product and internal systems • Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems • Review security designs and define actionable security requirements with Engineering, Cloud, IT, and Data teams • Embed security into development processes through secure coding guidance, design reviews, documentation, and security tooling • Establish and improve logging, detection, and protective monitoring capabilities • Develop incident response processes, runbooks, and exercises • Participate in security triage, assess vulnerability reports, validate findings, and prioritise remediation • Coordinate vulnerability remediation, verify fixes, and support secure patch and release processes • Help manage vulnerability disclosure and bug bounty programmes, coordinated disclosures, and GitHub Security Advisories • Support SOC 2 compliance through continuous control monitoring and automated evidence collection • Respond to customer security assessments and create reusable security resources • Assess security risks and improve policies and controls with Legal, Finance, IT, and other stakeholders

🎯 Requirements

• Hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls • Ability to validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation • Hands-on infrastructure, product, or application security experience within a product-focused organisation • Strong understanding of how modern systems are designed and secured • Ability to act as an internal security consultant and influence stakeholders without direct authority • Experience securing systems not directly owned by translating findings into actionable requirements and ensuring remediation • Fluency with LLM-assisted tooling, including limitations, security implications, and failure modes • Ability to explain complex security risks and document technical findings clearly • Deep expertise in at least two of: Application Security, Platform Security, Corporate Security, Security Monitoring, Security Assurance & Compliance • Application security experience with security checks, engineering guardrails, tooling, or guidance • Platform security experience with a major cloud provider and Kubernetes, including sandboxing, multi-tenancy, or identity • Corporate security experience with identity and access management, endpoint security, employee access lifecycles, or data access controls • Security monitoring experience implementing logging, protective monitoring, or detection capabilities • Security assurance/compliance experience supporting SOC 2 or ISO 27001, including technical controls or automated evidence collection • For countries other than Germany, existing right to work is required • Company language is English

🏖️ Benefits

• Equity ownership in n8n • Europe: 30 days of vacation plus public holidays wherever you are • Europe: benefits according to local country norms • Europe: pension contributions according to local country norms • €1K (or equivalent) per year for courses, books, events, or coaching • Regular hackathons • Remote-first work across Europe with regular off-sites • $100 per month to support open-source projects • Visa sponsorship for Germany