Senior Product Security Engineer

About Staffbase

Staffbase's mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, its team of 550+ supports 1,500+ customers reaching over 14 million employees, valued at over $1 billion.

About the Role

At Staffbase, security is at the heart of everything built. The Product Security team helps keep products and customer data secure while enabling engineering teams across the company, providing tools, guidance, and insights that allow developers to integrate security early in the development process.

What You'll Be Doing

• Take ownership of tasks that improve security automation and strengthen product security pipelines.
• Proactively explore the use of AI for vulnerability detection and remediation.
• Support the team by enhancing services with software engineering solutions.
• Maintain outbound e-mail security by regularly reviewing related metrics.
• Maintain the Web Application Firewall ruleset, Kubernetes security, and CI/CD pipeline security.
• Maintain the central HTML sanitization service written in TypeScript.

What You Need to Be Successful

• Practical knowledge of security topics (penetration testing, secure software development, vulnerability management, SAST, DAST).
• Strong programming skills, preferably TypeScript, JavaScript, Kotlin, Java, Go, or Python.
• Practical knowledge of Unix and Kubernetes infrastructure, preferably managed via Terraform and Kustomize.
• Strong communication skills in English (German is a plus).

What You'll Get

Competitive compensation with LTIP, flexible working with a €1,560 yearly flex work allowance, 31 vacation days, company pension scheme, and one Volunteers Day per year.