Product Security Engineer (m/f/x) at Scalable GmbH
München, Germany, Germany
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Scalable GmbH
Responsibilities:
- Conduct security assessments and code reviews for web, mobile and API products using manual and automated approaches.
- Triage vulnerability disclosures and external penetration test findings; coordinate remediation and reporting.
- Help integrate and tune SAST, DAST and SCA tools in CI/CD pipelines (GitHub Actions/AWS) for developer-friendly alerts.
- Support threat modelling and architecture reviews alongside senior security engineers and product teams.
- Provide developer enablement: guidance, playbooks and training to embed secure coding practices.
- Contribute to SSDLC improvements and help establish a formal Bug Bounty program in the future.
Requirements:
- Practical experience in application/product security and familiarity with OWASP Top 10 and common testing tools (Burp Suite).
- Experience with security tooling (SAST/DAST/SCA), vulnerability triage and working with CI/CD and cloud platforms.
- Comfortable reviewing code in Kotlin/Java/Python/TypeScript and collaborating with engineering teams.
- Strong communication skills, willingness to learn and grow with mentorship from senior engineers.