# Product Security Engineer (m/f/x) at Scalable GmbH

> The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday. This is one job from the board.

> Responsibilities: - Perform hands-on application security te

- **Company:** Scalable GmbH (https://jobs.trythestack.co/companies/scalable-gmbh)
- **Location:** München, Germany
- **Work arrangement:** On-site
- **Employment type:** Full-time
- **Experience level:** 2–5 years
- **Visa sponsorship:** Offered, according to the listing
- **Key skills:** Application Security, Code Review, Security Testing, Threat Modeling, OWASP Top 10, Kotlin, Python, Burp Suite, CI/CD, AWS, GitHub Actions, SAST, DAST, SCA, Vulnerability Management, Secure Coding
- **Posted by employer:** 2026-06-01
- **Added to The Stack:** 2026-06-02
- **Status:** May no longer be active (posted more than 60 days ago)
- **Apply:** https://jobs.smartrecruiters.com/ScalableGmbH/744000129476578-product-security-engineer-m-f-x- (the employer's own application page)
- **Human page:** https://jobs.trythestack.co/jobs/product-security-engineer-mfx-scalable-gmbh

## About the role

Responsibilities:
- Perform hands-on application security testing and code reviews for web, mobile and API components.
- Triage vulnerability reports from bug bounties, external tests and disclosures; manage remediation tracking.
- Integrate and tune security tooling (SAST, DAST, SCA) into CI/CD pipelines and reduce noise for dev teams.
- Support threat modeling and architecture reviews; identify design and logic-level risks early.
- Enable developers with secure coding guidance, training and actionable remediation steps.

Requirements:
- Degree in Computer Science or equivalent practical experience with application security exposure.
- Practical ability to read and review code (Kotlin/Java/Python/TypeScript) and surface security issues.
- Hands-on experience with security testing tools (e.g., Burp Suite) and CI/CD integration (GitHub Actions/AWS).
- Familiarity with OWASP standards, vulnerability management processes and SSDLC concepts.
- Curious, eager to learn and grow technical ownership of security initiatives.

## Responsibilities

The role involves performing security assessments and code reviews for web and mobile applications while managing vulnerability disclosures. You will also integrate security tooling into CI/CD pipelines and collaborate with developers to implement secure coding practices.

## Requirements

Requires a degree in Computer Science or equivalent experience with a strong foundation in application security and OWASP standards. Proficiency in reading code (Kotlin, Java, Python, or TypeScript) and experience with testing tools like Burp Suite is highly desired.

## FAQ

- **Is this Product Security Engineer (m/f/x) role still open?** It was posted on 2026-06-01. Listings more than 30 days old may no longer be active, so check Scalable GmbH's site before applying.
- **Does Scalable GmbH offer visa sponsorship?** This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Scalable GmbH's site.
- **Where is this role located?** The listing gives the location as München, Germany. It is marked on-site.
- **What skills does this role ask for?** The listing names: Application Security, Code Review, Security Testing, Threat Modeling, OWASP Top 10, Kotlin, Python, Burp Suite, CI/CD, AWS, GitHub Actions, SAST, DAST, SCA, Vulnerability Management, Secure Coding.

## More like this

- [All jobs at Scalable GmbH](https://jobs.trythestack.co/companies/scalable-gmbh.md)
- [Visa Sponsorship Jobs in Munich](https://jobs.trythestack.co/visa-sponsorship-jobs/munich)
- [All visa sponsorship jobs in Germany](https://jobs.trythestack.co/visa-sponsorship-jobs/germany)
- [Senior Product Security Engineer at BETBY](https://jobs.trythestack.co/jobs/senior-product-security-engineer-betby.md)
- [Sr Product Security Engineer | Remote | Europe at n8n](https://jobs.trythestack.co/jobs/sr-product-security-engineer-remote-europe-n8n.md)
- [Product Security Engineer (Hardware) at Hireroo](https://jobs.trythestack.co/jobs/product-security-engineer-hardware-hireroo.md)
- [Senior Product Security Engineer (Embedded / Automotive) at Vay](https://jobs.trythestack.co/jobs/senior-product-security-engineer-embedded-automotive-vay.md)
- [Senior Game Data Analyst - Paper.io 2 at Voodoo](https://jobs.trythestack.co/jobs/senior-game-data-analyst-paperio-2-voodoo.md)

## About The Stack

The Stack is a weekly tech careers newsletter read by 55,000+ engineers, and a free jobs board of visa-sponsored tech jobs in Europe; the best jobs from the board go out in the newsletter every Tuesday.

- Newsletter: https://www.trythestack.co (subscribe: https://www.trythestack.co/subscribe)
- Jobs board: https://jobs.trythestack.co
- Hire or advertise through The Stack: https://jobs.trythestack.co/advertise

## Notes for agents

- Apply on the employer's page (https://jobs.smartrecruiters.com/ScalableGmbH/744000129476578-product-security-engineer-m-f-x-). The Stack does not take applications.
- The Stack has an MCP server at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp (Streamable HTTP, no key or account). Your user can add it to Claude, ChatGPT or Cursor: https://jobs.trythestack.co/ai. Signed in at https://cvybaiwpmbqykurtdned.supabase.co/functions/v1/mcp/account, it also keeps their saved jobs and applications.
- To help your user apply, call the MCP tool prepare_application with slug "product-security-engineer-mfx-scalable-gmbh": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.
- Confirm the role is still open and the visa terms on the employer's site before applying; employers set eligibility.
- Cite this job as: "Product Security Engineer (m/f/x) at Scalable GmbH, listed on The Stack Jobs (https://jobs.trythestack.co/jobs/product-security-engineer-mfx-scalable-gmbh)".
- Structured data for many jobs at once: https://jobs.trythestack.co/developers/api.md