Product Security Engineer (m/f/x) at Scalable GmbH
München, Germany, Germany
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Scalable GmbH
Responsibilities:
- Perform hands-on application security testing for web, mobile and API components (manual testing + automated tooling).
- Conduct secure code reviews and validate fixes with engineering teams.
- Triage and manage vulnerability intake from bug bounties, disclosures and external penetration tests.
- Help integrate and tune SAST, DAST and SCA tools into CI/CD pipelines (AWS/GitHub Actions) to reduce false positives.
- Support threat-modeling sessions and assist in architecture/security reviews with product and engineering.
- Enable developers with guidance, secure coding advice, playbooks and remediation steps.
- Contribute to building repeatable processes (vulnerability management, reporting, metrics) and future Bug Bounty program.
Requirements:
- 2–5 years practical experience in application or product security (or equivalent experience).
- Strong knowledge of common web/mobile/API vulnerabilities and OWASP standards (Top 10 / ASVS).
- Experience with security testing tools (Burp Suite, SAST/DAST/SCA) and vulnerability triage workflows.
- Hands-on familiarity with at least one of: Kotlin, Java, Python, TypeScript.
- Experience working with CI/CD (GitHub Actions), cloud environments (AWS) and modern dev workflows.
- Good communication skills to work cross-functionally and mentor engineers; proactive, growth-oriented attitude.