Product Security Engineer (m/f/x) at Scalable GmbH
München, Germany, Germany
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Scalable GmbH
Responsibilities:
- Perform application security assessments and manual code reviews for web, mobile and API components.
- Combine automated tooling (SAST/DAST/SCA) with manual testing (Burp Suite) to validate controls and triage findings.
- Triage and manage vulnerability disclosures from bug bounties and external tests; help define remediation plans.
- Support integration of security tooling into CI/CD (GitHub Actions/AWS) and tune pipelines for high-fidelity alerts.
- Participate in threat modelling and architecture reviews; enable developers with secure coding guidance and training.
- Contribute to SSDLC improvements, documentation and the future formalisation of a Bug Bounty program.
Requirements:
- Strong foundational experience in application/product security and secure testing methodologies.
- Familiarity with OWASP Top 10 and use of tools such as Burp Suite; hands-on with SAST/DAST/SCA.
- Ability to review code in Kotlin/Java/Python/TypeScript and to work with CI/CD (GitHub Actions) and AWS.
- Good communication, teamwork and eagerness to learn and grow under senior guidance.