Product Security Engineer (m./f./div.)

Description

The company is an independent group that was separated from its former parent in mid-2025 and now sits within the portfolio of a European investment firm.

The group makes professional communication and security products, reported revenues above €1 billion in fiscal 2025, and employs about 4,000 people in more than 40 countries.

This mid-level role sits in the video management systems team, which builds cameras, video management software and edge and cloud analytics for demanding environments such as smart cities, transport, retail and critical infrastructure.

Responsibilities

• Advise on the security of new products and technologies across the organization.
• Serve as security lead on development projects and build security into every stage of the product lifecycle.
• Help development teams adopt DevSecOps by putting security into CI/CD pipelines and encouraging teams to think about security early.
• Guide project teams through secure product lifecycle management and give ongoing security support to the product engineering team.
• Run regular product security assessments together with engineering teams.
• Lead threat modeling sessions to find and rank risks at the design stage.
• Carry out application security assessments and secure code reviews for web, backend and native code.
• Run application security tools (SAST, DAST and SCA), set up scans, and sort and rank the findings.
• Coach developers on secure coding and on fixing application-layer flaws.
• Test current and legacy devices, products and supporting infrastructure for vulnerabilities on a regular basis.
• Triage and rank vulnerabilities, and track each one until it is fixed.
• Run and improve the product security pipeline tooling, cutting false positives and raising the quality of results.
• Build tools and automation so security processes can scale.
• Review AWS configurations, IAM policies and infrastructure, and help secure them.
• Help secure cloud-hosted product deployments and build security into infrastructure-as-code and cloud CI/CD workflows.
• Respond to vulnerabilities flagged by threat detection systems and support incident detection and response.
• Operate and support internal and public PKI, certificate issuance and lifecycle management, and related cryptographic services.
• Maintain internal security documentation and standards.

Requirements

• 3-5 years in product, application or offensive security.
• A degree in computer science, cybersecurity or a related field, or equivalent experience.
• Hands-on experience assessing vulnerabilities.
• Application security work, including secure code review and working with SAST, DAST and SCA tools.
• Experience applying threat modeling methods such as STRIDE.
• A practical grasp of the secure software development lifecycle, DevSecOps and CI/CD security.
• Cloud security knowledge, mainly AWS: core services, IAM and accepted cloud security practice.
• Solid grasp of PKI, digital certificates and applied cryptography.
• Scripting and automation skills, for example in Python, to build and scale security tooling.
• Knowledge of how incidents are detected and handled.
• Strong communication skills for working with development and project teams.
• Penetration testing experience across devices, applications and infrastructure.
• Experience with embedded or IoT devices, video management systems or network appliances.
• Exposure to regulatory frameworks such as the EU Cyber Resilience Act (CRA).
• Familiarity with AI security, with assessing AI-powered products and features, and with using AI tools to speed up daily security work.
• Cloud security certifications, for example AWS Certified Security, Specialty.
• Relevant certifications, for example OSCP, GIAC or CEH.

Conditions

All positions are open to people with disabilities.

The company is an equal opportunity employer and welcomes applications from people with disabilities, with support available on request.

Benefits

• Flexible work conditions, including 2 days of HO.
• Health insurance and an on-site medical office offering nutrition, psychology, physiotherapy and general medical care.
• On-site canteen and free parking.
• Sports and health activities, including a gym.
• Training opportunities, such as technical and foreign language courses, and support for certifications.
• Opportunities for career progression and continuous professional development.
• Exchange with colleagues around the world.
• Discounts on partner offers and products.