Product Security Engineer
Innovatrics Zobrazit všechny práce
- Brno, Jihomoravský
- Trvalý pracovní poměr
- Plný úvazek
- Our biometric products and system architecture
- SaaS and on-prem deployment models (Kubernetes, cloud, CI/CD)
- Current secure development practices
- How ISO 27001 controls are implemented in the engineering scope
- Defining and evolving our solution security strategy
- Embedding secure SDLC practices across engineering teams
- Introducing structured threat modeling and security design reviews
- Strengthening Kubernetes, cloud, and CI/CD security
- Establishing vulnerability management and secure release processes
- Acting as the security authority for software and deployment-related risks, including the mandate to block releases if critical risks are identified
- Acting as a whitehat hacker and trying to bypass our injection attack detection
- Mature product security into a measurable engineering discipline
- Improve SaaS and on-prem hardening baselines
- Establish DevSecOps practices integrated into CI/CD
- Increase visibility of product security risks for leadership
- Prepare engineering scope for surveillance and recertification audits
- Potentially grow a focused product security capability
- Slovakia, Brno or EU- based
- Regular collaboration overlaps within the CET time zone
- Proven experience leading or significantly shaping product security in a software or SaaS company
- Strong knowledge of application security, secure SDLC, and threat modeling
- Experience securing Kubernetes environments, cloud infrastructure, and CI/CD pipelines
- Experience with vulnerability management and secure release processes
- Familiarity with ISO 27001 controls as they relate to software development and deployment
- Strong communication skills and ability to influence engineering teams
- CISSP
- ISO/IEC 27001 Lead Implementer or Lead Auditor
- Kubernetes (SaaS and on-prem deployments)
- Cloud environments
- CI/CD pipelines
- Java, Kotlin, Python, C++
- API-driven microservices architecture
- Recruiter Screen
- Technical Interview [45-60 min.]: An interactive session with our technical team where we’ll explore your problem-solving approach, technical knowledge to the role
- Independent Task [30-45 min.]: You will work individually on a practical assignment designed to reflect real-world challenges.
- CARES Interview [~30 min.]: Final conversation with our CARES committee to ensure alignment with our core values—Collaboration, Accountability, Respect, Excellence, and Shared Mission.
- Reference checks and background verification