Overview
As Principal Product Security Engineer at Tellent, you will shape how we design, build, and ship secure software. You’ll split your time between hands-on vulnerability hunting and implementing secure-by-default patterns across engineering teams. You’ll drive root-cause analysis to eliminate whole classes of issues and partner with Security, GRC, and engineering leadership to define a product security roadmap. This is a high-impact, first-of-its-kind role that blends offensive testing with strategic security direction to enable teams to build securely from design. Your work will influence how security is embedded throughout the product and organization.
Arbeidsvoorwaarden / Benefits
- Hybrid or remote work across NL, DE and PL
- 1,500 annual training budget + 2 learning days
- Dedicated tooling budget and security community connections
- Pension plan, travel reimbursement and wellness perks
- 28 paid holidays + 2 additional days
- Work from anywhere for 4 weeks per year
Verantwoordelijkheden
- Perform deep manual security reviews and offensive testing on services, APIs, and clients with focus on high-risk areas
- Threat model high-risk product surfaces, including AI features
- Own the technical strategy for application security tooling (Aikido)
- Triage vulnerabilities from internal tooling, pen tests, and researchers; defend severity calls and verify fixes
- Identify patterns and root causes to build systemic fixes and secure-by-default libraries
- Develop secure development standards for engineers’ day-to-day work
- Collaborate with Security to support bug bounty, pentest remediation, and security champions program
- Act as senior technical partner during product security incidents
- Shape and own the product security roadmap across Backend, Frontend, QA, DevOps, Product and Security
Belangrijkste vereisten
- Strong engineering foundation with hands-on security experience
- Proven ability to identify and explain vulnerabilities end-to-end
- Knowledge of access control, multi-tenancy, authentication/authorization, session management, injections, SSRF, deserialization, business logic abuse, supply-chain risk
- Hands-on coding ability and ability to reason about unfamiliar systems
- Experience threat modelling real systems and turning findings into engineering work
- Working knowledge of cloud security, containers, CI/CD, infrastructure as code
- Technology-agnostic mindset for multiple languages and stacks
- Excellent communication to explain vulnerabilities and trade-offs to stakeholders
- Collaborative, low-ego approach with ability to enable teams
- Experience with AI/LLM security and privacy engineering is a plus
- Certifications welcome but not required
- Excellent communication
- Collaborative and low-ego attitude
- Ability to influence without gatekeeping
- Threat modelling
- Offensive security testing / vulnerability discovery
- Application security and secure coding
Principal Product Security Engineer in Amsterdam werkgever: Jobrapido
StarPark is een uitstekende werkgever die je de kans biedt om te werken op diverse evenementen en festivals, waar je in een informele en prettige werksfeer kunt bijdragen aan de veiligheid van bezoekers. Met flexibele werkmogelijkheden en goede begeleiding vanuit het team, stimuleert StarPark persoonlijke groei en ontwikkeling, waardoor je niet alleen waardevolle ervaring opdoet, maar ook de mogelijkheid hebt om door te groeien binnen de organisatie. Wij verwelkomen iedereen, ongeacht achtergrond, en geloven dat jouw talent het belangrijkste is.
