Product Security Engineer (m/f/x) at Scalable GmbH

München, Germany

on-site · full-time · Visa sponsorship

Responsibilities:
- Perform hands-on application security testing and code reviews for web, mobile and API components.
- Triage vulnerability reports from bug bounties, external tests and disclosures; manage remediation tracking.
- Integrate and tune security tooling (SAST, DAST, SCA) into CI/CD pipelines and reduce noise for dev teams.
- Support threat modeling and architecture reviews; identify design and logic-level risks early.
- Enable developers with secure coding guidance, training and actionable remediation steps.

Requirements:
- Degree in Computer Science or equivalent practical experience with application security exposure.
- Practical ability to read and review code (Kotlin/Java/Python/TypeScript) and surface security issues.
- Hands-on experience with security testing tools (e.g., Burp Suite) and CI/CD integration (GitHub Actions/AWS).
- Familiarity with OWASP standards, vulnerability management processes and SSDLC concepts.
- Curious, eager to learn and grow technical ownership of security initiatives.