Product Security Engineer (m/f/x) at Scalable GmbH
München, Germany, Germany
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Scalable GmbH
Responsibilities:
- Perform hands-on application security testing for web, mobile, and API surfaces (manual + automated).
- Conduct secure code reviews and identify logic/implementation flaws across multiple languages.
- Triage and manage vulnerability reports from bug bounties, third-party tests, and internal findings.
- Integrate and tune SAST/DAST/SCA tooling into CI/CD (GitHub Actions/AWS) to reduce developer noise.
- Support threat modeling and architecture reviews with product and senior security engineers.
- Enable developers through vulnerability remediation guidance, training, and security checklists.
- Contribute to building automation, security pipelines, and processes (vuln management, intake, metrics).
Requirements:
- Strong foundation in application security and OWASP Top 10/ASVS concepts.
- Practical experience with security testing tools (e.g., Burp Suite) and static/dynamic analysis.
- Comfortable reading and reviewing code (Kotlin, Java, Python, TypeScript or similar).
- Familiarity with CI/CD pipelines, GitHub Actions, and AWS deployment patterns.
- Experience or interest in vulnerability triage and vulnerability management workflows.
- Good communication skills to collaborate with engineering and product teams.
- Degree in CS or equivalent practical experience; willingness to learn and grow in product security.