Senior Product Security Engineer

🕒 il y a 6 mois

🇩🇪 Allemagne – Télétravail

⏰ Temps Plein

🟠 Senior

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 75%

Ce que ça veut dire : la probabilité que personne ne recrute vraiment pour cette offre.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

n8n

Site WebLinkedInTous les Emplois

11 - 50 employés

Fondée en 2019

💼 Conseil

📦 Logistique

🏭 Fabrication

Consulting • Logistics • Manufacturing

n8n est une plateforme sécurisée d'automatisation des workflows, native à l'IA, conçue pour les équipes techniques. Elle permet aux utilisateurs de créer des agents autonomes à étapes multiples et d'automatiser les workflows à travers diverses applications avec des intégrations illimitées. Avec un support à la fois pour le code et pour une interface utilisateur intuitive, n8n permet aux entreprises de rationaliser leurs opérations, d'améliorer les processus informatiques et de sécurité, et d'optimiser leur CRM, tout en maintenant la conformité et en assurant un temps de fonctionnement crucial pour les missions.

Description

• Identify and reduce security risks across n8n’s product and internal systems • Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems • Review security designs and define actionable security requirements with Engineering, Cloud, IT, and Data teams • Embed security into development processes through secure coding guidance, design reviews, documentation, and security tooling • Establish and improve logging, detection, and protective monitoring capabilities • Develop incident response processes, runbooks, and exercises • Participate in security triage, assess vulnerability reports, validate findings, and prioritise remediation • Coordinate vulnerability remediation, verify fixes, and support secure patch and release processes • Help manage vulnerability disclosure and bug bounty programmes, coordinated disclosures, and GitHub Security Advisories • Support SOC 2 compliance through continuous control monitoring and automated evidence collection • Respond to customer security assessments and create reusable security resources • Assess security risks and improve policies and controls with Legal, Finance, IT, and other stakeholders

🎯 Exigences

• Hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls • Ability to validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation • Hands-on infrastructure, product, or application security experience within a product-focused organisation • Strong understanding of how modern systems are designed and secured • Ability to act as an internal security consultant and influence stakeholders without direct authority • Experience securing systems not directly owned by translating findings into actionable requirements and ensuring remediation • Fluency with LLM-assisted tooling, including limitations, security implications, and failure modes • Ability to explain complex security risks and document technical findings clearly • Deep expertise in at least two of: Application Security, Platform Security, Corporate Security, Security Monitoring, Security Assurance & Compliance • Application security experience with security checks, engineering guardrails, tooling, or guidance • Platform security experience with a major cloud provider and Kubernetes, including sandboxing, multi-tenancy, or identity • Corporate security experience with identity and access management, endpoint security, employee access lifecycles, or data access controls • Security monitoring experience implementing logging, protective monitoring, or detection capabilities • Security assurance/compliance experience supporting SOC 2 or ISO 27001, including technical controls or automated evidence collection • For countries other than Germany, existing right to work is required • Company language is English

🏖️ Avantages

• Equity ownership in n8n • Europe: 30 days of vacation plus public holidays wherever you are • Europe: benefits according to local country norms • Europe: pension contributions according to local country norms • €1K (or equivalent) per year for courses, books, events, or coaching • Regular hackathons • Remote-first work across Europe with regular off-sites • $100 per month to support open-source projects • Visa sponsorship for Germany

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV