Product Security Engineer (m/f/x) at Scalable GmbH
München, Germany, Germany
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Scalable GmbH
Responsibilities:
- Execute application security assessments and code reviews for web, mobile and API services using manual and automated techniques.
- Triage and manage reported vulnerabilities from internal tests, external pentests and disclosure channels.
- Help integrate and fine-tune SAST/DAST/SCA tooling in CI/CD (GitHub Actions, AWS) to produce actionable alerts for developers.
- Support threat modeling and architectural reviews alongside senior security engineers and product teams.
- Provide developer enablement: remediation guidance, secure-by-default patterns and training materials.
- Contribute to building vulnerability management processes and lay groundwork for a formal Bug Bounty program.
Requirements:
- 2–5 years experience in application or product security or equivalent hands-on experience.
- Familiarity with web/mobile/API vulnerability classes and OWASP guidance (Top 10/ASVS).
- Practical experience with security testing tools (Burp Suite, SAST/DAST/SCA) and vulnerability triage.
- Working knowledge of one or more languages: Kotlin, Java, Python, TypeScript.
- Experience with CI/CD environments (GitHub Actions), cloud platforms (AWS) and developer workflows.
- Strong collaboration and communication skills to work across engineering, operations and compliance.