Senior Product Security Engineer

3 weeks, 3 days ago
Full-time
Senior
Cybersecurity
payabl.

payabl.

payabl. empowers merchants to handle payments on a global scale by offering a comprehensive solution that includes card acquiring, alternative payment methods, payment accounts, and prepaid cards.

Diversified Financial Services
51-250
Founded 2011

Description

  • Design and introduce security gates, secure release practices, and guardrails throughout the development lifecycle.
  • Lead threat modeling and secure-by-design reviews for new products and major changes.
  • Advise on secure architecture for card issuing, embedded finance, banking-as-a-service, and payment products.
  • Define secure-by-default application patterns for authentication, authorization, APIs, and service-to-service trust.
  • Select and operate application security tooling, including AI-assisted solutions where appropriate.
  • Own CI/CD pipeline and software supply-chain security controls across engineering teams.
  • Implement container scanning, dependency management, software bills of materials, and infrastructure-as-code security checks.
  • Introduce AI agents and LLM-assisted workflows into application security operations.
  • Drive remediation of findings from penetration tests, security scanners, and disclosure reports with engineering teams.

Requirements

  • 5+ years of Product Security or Application Security experience in payments, fintech, banking, e-money, or a similar environment.
  • Strong hands-on experience embedding security into the software development lifecycle.
  • Ability to read code and participate effectively in design discussions with senior engineers.
  • Experience with threat modeling, secure-by-design reviews, and architecture and delivery engagements.
  • Hands-on experience with SAST, SCA, secrets detection, and DAST tooling.
  • Experience securing cloud-native applications on AWS or another major cloud platform.
  • Strong AI proficiency, including agentic workflows, RAG, MCP, or similar technologies.
  • Understanding of cloud-first environments and modern development practices.
  • Experience securing CI/CD pipelines and improving software supply-chain security.
  • Strong ownership, communication, and influence skills, with strong written and verbal English.
  • Experience with cloud-native or API-driven product launches, security-as-code, or detection-as-code preferred.
  • Penetration testing or offensive security experience preferred.
  • CISSP, CSSLP, CCSP, OSCP, or similar certification preferred.

Benefits

  • Fully remote work from Portugal or Poland.
  • Annual professional development budget after probation.
  • Company celebrations bringing colleagues from all offices together.
  • Opportunities to participate in international company events and initiatives.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Product Security Engineer

Chainguard 51-250 Internet Software & Services

Chainguard is hiring a security engineer to embed secure software supply chain practices into CI/CD and cloud-native product development, reducing risk across its Kubernetes, cloud, and open source software stack.

AWS CI/CD GCP GitHub Actions Go Kubernetes OWASP Penetration Testing Python Secrets Management Tekton
4 days, 3 hours ago

Product Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is hiring a Security Engineer to partner with engineering and product teams remotely, building secure-by-default systems and driving measurable application security outcomes.

AWS Docker GCP Go Java Kubernetes Python Ruby Terraform
1 week, 3 days ago

Staff Application & Product Security Engineer

Cleo 251-1K Internet Software & Services

Cleo is hiring a Staff Application Security Engineer to own secure product development and the security posture of its SaaS and customer-hosted products, partnering with engineering and security teams from design through release.

AWS Burp Suite CI/CD GitHub Go Java Jenkins Kubernetes Penetration Testing Python SAML Terraform TypeScript
1 week, 3 days ago

Application Security Engineer

Bugcrowd 1K-5K Internet Software & Services

Bugcrowd is seeking an Application Security Engineer to triage and validate vulnerability submissions across client bug bounty programs, communicate with researchers and customers, and escalate critical security incidents.

Burp Suite Nmap
2 weeks, 4 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers