Product Security Engineer at N26
Barcelona, Spain
Posted
on-site · full-time · Visa sponsorship
Responsibilities:
- Partner with product and engineering teams to design secure solutions across microservices, mobile apps and GenAI/LLM features.
- Run application security design reviews, threat modeling sessions and targeted code reviews.
- Execute penetration tests and hands-on assessments for APIs, services and AI-integrated features.
- Build SSDLC tooling and automation that integrates into CI/CD pipelines to detect and prevent vulnerabilities.
- Create automation frameworks and scripts to reduce manual security toil and enable developer self-service.
- Coach engineering teams and security champions on secure coding, AI-specific controls and data governance requirements.
- Support incident response activities and coordinate remediation of security findings.
- Continuously research AI and platform-specific attack vectors and recommend mitigations.
Requirements:
- Proven experience in product/application security across cloud, web and mobile platforms.
- Practical experience with threat modeling, code review, penetration testing and security architecture.
- Development skills in Python or Go and experience building security automation or tools.
- Familiarity with microservices, containerized deployments and cloud security patterns.
- Understanding of AI/LLM security risks, data pipeline protections and relevant privacy considerations.
- Knowledge of OWASP Top 10, static/dynamic analysis, fuzzing and vulnerability management processes.
- Strong communication skills to align security guidance with product and engineering priorities.
- Experience working in cross-functional teams and supporting SSDLC adoption.