Senior Product Security Engineer

About Staffbase

We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 550+ employees supports 1,500+ customers.

At Staffbase, security is at the heart of everything we build. Our Product Security team helps keep our products and customer data secure while enabling engineering teams across the company.

As an enablement team, we provide tools, guidance, and insights that allow developers to integrate security early in the development process. We see security not as a blocker but as a trusted partner.

What you'll be doing

• Take ownership of tasks that improve our security automation and strengthen our product security pipelines
• Proactively explore the use of AI for vulnerability detection and remediation
• Continuously learn and share knowledge about how vulnerabilities apply in our specific product context
• Support the team by enhancing our services with software engineering solutions
• Collaborate closely with stakeholders across the product department
• Maintain our outbound e-mail security by regularly reviewing the related metrics
• Maintain our Web Application Firewall ruleset
• Kubernetes security
• CI/CD pipelines security
• Maintain our central HTML sanitization service written in TypeScript

What you need to be successful

• Practical knowledge of security topics (e.g. penetration testing, secure software development, vulnerability management, SAST, DAST)
• Strong programming skills, preferably one of the following: TypeScript, JavaScript, Kotlin, Java, Go, or Python
• Practical knowledge of Unix and Kubernetes infrastructure, preferably managed via Terraform and Kustomize
• Strong communication skills in English (German is a plus)

What you'll get

• Competitive Compensation - attractive salary packages including LTIP (unit-based Long Term Incentive Plan)
• Flexibility - flexible working time models and hybrid work, yearly flex work allowance of €1560
• Recharge - 31 vacation days annually, plus pro rata fully paid Fridays off during August
• Support - company pension scheme
• Volunteers Day - one day off per year for supporting a social project