What You'll be Doing

Own the end-to-end vulnerability lifecycle including discovery, triage, remediation tracking, risk management, and security posture reporting.
Maintain and evolve security tooling and automation workflows to help teams detect and address security issues effectively.
Participate in security operations by responding to incidents, providing expertise, reproducing vulnerabilities, and performing internal penetration tests.
Manage collaborations with security vendors, external researchers, and coordinate penetration tests to focus research efforts and define scopes.
Conduct security design and code reviews and provide guidance to embed security proactively in product development.
Maintain security policies, best-practice documentation, and provide metrics for stakeholders and leadership.
Drive security education and awareness initiatives across engineering teams through knowledge sharing and enablement programs.

Requirements

5+ years of hands-on experience in product security, offensive security, systems security, or related professional education.
Practical experience managing vulnerability programs, consolidating security issues, and prioritizing findings based on real-world risks.
Ability to define and report vulnerability management metrics to demonstrate program health and accountability.
Technical expertise in security engineering best practices including secure-by-default design, least privilege, authentication, secrets management, dependency management, and security logging.
Strong understanding of security vulnerabilities, threat modeling, and ability to assess exploitability and attack paths via code and documentation reviews.
Capability to guide engineers on remediation methods across multiple programming languages and frameworks.
Fluent English communication skills with ability to explain complex security concepts to executive, technical, and non-technical audiences.
Proactive mindset with initiative to identify gaps, improve processes, and drive security outcomes.
Ability to handle ambiguity, make informed decisions, and manage competing priorities for maximum security impact.

Competitive reward package including salary, benefits, and pre-IPO equity, reevaluated annually.
28 days of paid vacation plus additional days after 2 and 4 years of service.
One fully paid Impact Day to contribute to environment and society.
Generous family leave, child support, and mental health support including 24 sessions per year for employees and 10 for significant others.
Sabbatical opportunities for extended personal development or rest.
Inclusive and integrative culture promoting diversity and equal opportunities.
Flexible work arrangement with expectation of 2 days per month in office, locations include Munich, Berlin, Dublin, London, Madrid, and Amsterdam.
Regular team gatherings featuring meals, cultural events, summer sessions, year-end celebrations, healthy snacks, drinks, and weekly catered lunch.