Senior Product Security Engineer

About the Position

We are looking for a Senior Product Security Engineer to join our team in a remote position within Germany. At Staffbase, we are dedicated to helping organizations unlock the power of inspirational communication with our AI-native Employee Experience Platform. Our Product Security team plays a crucial role in ensuring the security of our products and customer data, enabling engineering teams across the company.

About Staffbase

We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first AI-native Employee Experience Platform. Our industry-leading and award-winning agentic AI communications channels - intranet, employee app, and email solutions - create engaging experiences that connect and empower employees.

Headquartered in Chemnitz, Germany, and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 550+ employees supports 1,500+ customers-reaching over 14 million employees-in transforming their employee experience. We are proud to be a Unicorn company-privately valued at over $1 billion-demonstrating strong growth, innovation, and lasting impact in our industry. Together, we’re shaping the future of workplace communication.

Responsibilities

• Take ownership of tasks that improve our security automation and strengthen our product security pipelines
• Proactively explore the use of AI for vulnerability detection and remediation
• Continuously learn and share knowledge about how vulnerabilities apply in our specific product context
• Support the team by enhancing our services with software engineering solutions
• Collaborate closely with stakeholders across the product department and gain broad exposure to how a growing SaaS company operates
• Maintain our outbound email security by regularly reviewing the related metrics
• Maintain our Web Application Firewall ruleset
• Kubernetes security
• CI/CD pipelines security
• Maintain our central HTML sanitization service written in TypeScript

Requirements

• Practical knowledge of security topics (e.g. penetration testing, secure software development, vulnerability management, SAST, DAST)
• Strong programming skills, preferably one of the following: TypeScript, JavaScript, Kotlin, Java, Go, or Python
• Practical knowledge of Unix and Kubernetes infrastructure, preferably managed via Terraform and Kustomize
• Strong communication skills in English (German is a plus)

We Offer

• Competitive Compensation - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan)
• Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560
• Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August
• Support - we’re offering a company pension scheme
• Volunteers Day - you’ll get one day off per year for supporting a social project

Apply for this Job

Interested in building your career at Staffbase? Get future opportunities sent straight to your email.