Principal Product Security Engineer

5 dagen geleden

Amsterdam, Gem. Amsterdam; Noord-Holland, Nederland albelli Voltijd
ph3Make Your Mark as an Principal Product Security Engineer at Storio group /h3 h3About The Role. /h3 pYou will be based in our Amsterdam office, where you will help shape how security is built into our ecommerce platform and engineering organisation. This is a senior individual contributor role operating at the intersection of Product Security and Application Security. You will work directly with engineers, architects, and product teams to solve complex security problems, influence technical decisions, and make secure-by-design engineering the standardnorm. You will have significant autonomy and influence to establish practical security standards, raise security capability across teams, and guide the secure adoption of AI across our engineering ecosystem. /p h3How You Embrace Curiosity Daily. /h3 ul liYou collaborate closely with engineers, architects, and product teams to find turn security challenges into pragmatic solutions for security challenges /li liYou mentor engineers and Security Champions to make security increasingly embedded within engineering culture /li liYou build and enable security automation that improves security outcomes while reducing friction for engineering teams. /li liYou lead threat modelling and security architecture reviews for key products and technology initiatives to identify problems early. /li liYou experiment with and adopt AI tools creatively to automate security engineering workflows and boost productivity. /li /ul h3How You Make Your Mark. /h3 ul liYou define security principles, standards, patterns, and guardrails that enable engineers to build securely at pace /li liYou shape the strategic technical direction of Product Security across our entire platform and engineering organisation. /li liYou protect our platform by providing hands-on expertise across APIs, microservices, cloud infrastructure (AWS), authentication, authorisation, and software supply chain security. /li liYou identify and mitigate emerging security risks,including those introduced by AI, and communicate potential impact clearly to senior stakeholders. /li liYou measure what matters by developing meaningful Product Security metrics to continuously drive security posture improvements. /li /ul h3What You Bring To The Team. /h3 ul liYou bring significant (5+ years) experience in Product Security, Application Security, or Security Engineering within a modern software environment /li liYou have strong experience in security architecture and threat modelling, with a proven ability to turn risk into practical engineering solutions. /li liYou possess deep technical knowledge of application and API security, secure development practices, modern software architectures, and cloud-native systems. /li liYou bring experience embedding security controls into engineering workflows, software supply chains (SBOMs), and the broader software development lifecycle. /li liYou are an excellent communicator who builds trust and influences engineers, architects, and senior technical leaders without relying on direct authority. /li liYou have experience with, or a strong interest in, AI security and leveraging AI tools to advance security engineering. /li /ul h3What Sets You Apart. /h3 ul liYou have hands-on experience with Infrastructure as Code (IaC) security, scaling Security Champions programs, or managing Bug Bounty programs /li liYou hold relevant industry or cloud security certifications (e.g., CISSP, CSSLP, AWS Security Specialty), though we care far more about your practical impact than the certificates you hold. /li /ul /p #J-18808-Ljbffr