Product Security Engineer

About the Position

Product Security Engineer

Spain

---

About the Company

Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in minutes-it just works and is always free for the first 200 endpoints with no functional limits.

By pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment without requiring a VPN, Action1 eliminates routine IT labor, helps prevent ransomware and security risks, and protects the digital employee experience.

In 2025, Action1 was recognized by Inc. 5000 as the fastest-growing private software company in America.

The company is founder-led by Alex Vovk and Mike Walters, entrepreneurs who previously founded Netwrix, a multi-billion-dollar cybersecurity company.

---

Responsibilities

• Support PSIRT and vulnerability handling activities
• Validate, triage, track, and coordinate security reports
• Provide practical remediation guidance to engineering teams
• Help validate security fixes and reduce product security risks
• Review code, APIs, and architecture to identify security issues early
• Conduct threat modeling and security design reviews
• Improve security automation in engineering workflows
• Support SAST, SCA, secrets scanning, and other security controls
• Maintain SBOMs, dependency visibility, and remediation follow-up
• Support security assessments, vulnerability assessments, and penetration testing
• Maintain vulnerability handling playbooks, product security procedures, and incident response runbooks

---

Requirements

• 3+ years of experience in product security, application security, DevSecOps, or a related cybersecurity field
• Strong software engineering background and ability to work effectively with engineering teams
• Understanding of application, API, infrastructure, and software supply chain security risks
• Experience applying cloud security concepts and practices
• Understanding of IAM, network security, logging, monitoring, and secure cloud architecture patterns
• Familiarity with vulnerability management, incident response, security assessments, and secure SDLC practices
• Experience with threat modeling and security design reviews
• Strong communication skills, including professional communication with external researchers and vendors
• Ability to work independently and as part of a team in a fast-moving environment

---

Nice to Have

• Genuine interest in cybersecurity and motivation to grow as a product security expert
• Hands-on experience with AWS security controls, best practices, and architecture patterns
• Hands-on experience with C++ or JavaScript
• Experience with security testing and automation using scripting, APIs, CI/CD pipelines, or specialized tools
• Experience with threat modeling for SaaS, API, cloud, or on-prem product components
• Experience with SBOM generation, dependency visibility, or software supply chain security

---

We Offer

• Fully remote work environment
• Opportunity to work on a real security product used by IT and security teams
• High ownership and direct impact on product security practices
• Close collaboration with engineering, product, and security teams
• Fast-growing software company with low bureaucracy and practical decision-making
• Opportunity to improve security processes, automation, and engineering workflows
• Supportive team that values clear thinking, ownership, and continuous learning