Product Security Engineer (m/f/x) at Scalable GmbH
München, Germany, Germany
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Scalable GmbH
Responsibilities:
- Conduct security assessments and code reviews for web, mobile and API services.
- Combine manual testing (e.g., Burp Suite) with automated SAST/DAST/SCA to validate security controls.
- Triage vulnerability disclosures and coordinate remediation with engineering teams; help mature bug bounty intake.
- Support threat modeling and architecture reviews to identify logic and design-level vulnerabilities.
- Integrate and tune security tooling in CI/CD (AWS/GitHub Actions) and improve developer workflows.
- Provide developer enablement: secure coding guidance, playbooks and training materials.
Requirements:
- Strong foundational knowledge in application security, OWASP Top 10 and secure development practices.
- Experience with security testing tools and performing manual assessments and code reviews.
- Familiarity with Kotlin, Java, Python or TypeScript and ability to read/assess application code.
- Practical experience integrating SAST/DAST/SCA into CI/CD pipelines and reducing false positives.
- Good communication and collaboration skills; willingness to learn and expand into architecture and tooling work.
- Prior exposure to vulnerability management, API/mobile security and cloud (AWS) is desirable.