Product Security Engineer (m/f/x) at Scalable GmbH
München, Germany, Germany
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Scalable GmbH
Responsibilities:
- Perform application security assessments and hands-on code reviews for web, mobile and API products.
- Run manual testing and validate automated tool findings (SAST, DAST, SCA) within CI/CD pipelines.
- Triage and manage vulnerability reports from bug bounties and external tests; support remediation tracking.
- Support threat modeling sessions with product and engineering teams to identify design-level risks.
- Help integrate and tune security tooling (GitHub Actions/AWS) to reduce noise and increase developer actionability.
- Enable developers with guidance, secure-by-default patterns, checklists and lightweight training.
Requirements:
- Solid foundation in application/product security and familiarity with OWASP Top 10 and secure SDLC concepts.
- Experience with security testing tools and proxies (Burp Suite) and combining manual and automated assessments.
- Comfortable reading code and performing code reviews in Kotlin, Java, Python or TypeScript.
- Practical experience integrating SAST/DAST/SCA into CI/CD and tuning results for developer workflows.
- Good understanding of API and mobile security concepts and vulnerability management processes.
- Strong communication skills, a collaborative mindset and eagerness to learn and grow in a security team.