Product Security Engineer – Secure Systems & Cloud

About the role

We are looking for a Product Security Engineer to partner with engineering teams and embed security into our platform as it scales. This hands‑on role will improve the security of applications, cloud infrastructure, APIs and the development lifecycle.

Key responsibilities

• Review application architecture and new features for security risks and perform threat modeling.
• Identify and remediate vulnerabilities in backend services, APIs, mobile and web platforms.
• Build and evolve a Secure SDLC, integrate security tools into CI/CD pipelines and guide developers.
• Strengthen cloud and Kubernetes environments, IAM policies, secrets management and infrastructure hardening.
• Deploy and maintain SAST, DAST, dependency, container and secret‑detection scanning, automating security checks.
• Support internal and external penetration‑testing activities and security monitoring.

Required profile

• 4+ years of experience in product/application security, security engineering or software development.
• Strong software engineering background with experience securing backend systems, REST APIs and micro‑services.
• Hands‑on experience with cloud platforms (AWS, GCP or Azure) and container orchestration (Kubernetes, Docker).
• Proven ability to implement Secure SDLC practices and security automation.
• Fluent English and ability to influence engineering decisions.
• Nice‑to‑have: mobile security, fintech/crypto experience, offensive‑security or relevant certifications.

Required skills

• Application security, threat modeling, security design reviews.
• Secure SDLC, CI/CD integration, developer security guidance.
• Kubernetes, Docker, IAM, secrets management.
• AWS / GCP / Azure cloud services.
• SAST, DAST, dependency scanning, container scanning, secret detection.
• OWASP Top 10, secure coding practices, REST APIs, micro‑services.

What we offer

• Professional growth support for courses, conferences and English learning (up to 100 % coverage).
• Remote or hybrid work with flexible hours across international teams.
• Paid leave: up to 20 vacation days, 8 company holidays and 5 personal days per year.
• Recognition programs, structured performance reviews and team awards.
• Team retreats in international locations (e.g., company apartments in Cyprus).