CrawlJobs Logo
Adyen Logo Adyen · IT - Software Development

Product Security Partner

Netherlands, Amsterdam · Job Posted March 20, 2026
Apply Position
Job Link Share

Job Description

This is a high-impact role that blends strategic advisory with the technical rigor of Product Security Engineering. You will act as the primary security expert for a wide range of engineering teams, ensuring that security is embedded early in the product lifecycle (“security by design”). You will empower these teams to build secure, compliant products by providing hands-on technical guidance, facilitating threat modeling, and developing self-service security resources. You will collaborate closely with many parts of the organization to build the future of secure financial services.

Job Responsibility

  • Build relations with the product and engineering teams and learn the ins-and-outs of their products
  • Be the go-to security person for a subset of engineering teams and help them with your security domain knowledge both technical and non-technical
  • Work closely together with our engineers to architect secure systems and support our engineers by facilitating our security related activities and processes, such as secure design and threat modelling exercises
  • Work together with the global Security Team on a wide range of security challenges
  • Help shape and execute on the culture and practice of security in a rapidly growing FinTech that processes $1T+ of payment per year

Requirements

  • At least 3 years experience working in the security domain, preferably in a fast-paced environment
  • Broad and substantial experience in different security domains
  • Experience in more than one of the following areas: Development Security, Secure Design, Container Security, Mobile Security, Infrastructure Security
  • Experience in facilitating Security activities, such as Threat Modelling and Secure Design reviews
  • Understanding of web technologies and the security nuances of modern web and/or mobile frameworks
  • Enthusiastic about security and able to foster a strong security culture in a positive, structural way
  • Understand that information security problems need people-based solutions as much as technology-based ones
  • Able to proactively identify, assess and discuss security priorities in different layers of the organization
  • Able to foster strong collaboration with engineering teams
  • Great communication skills, the ability to communicate with stakeholders on any technical level
Adyen - All Job Offers

Looking for more opportunities?

Search for other job offers that match your skills and interests.

Suggested Tags: Frontend Developer Secretary Talent Manager Salesforce Administrator Data Analyst
Similar Jobs for

Product Security Partner

8 matching positions

Staff Security Engineer, Product Security

At Mozilla, we believe the internet is a global public resource—open and accessi...
Location
Location
United States; Canada , Remote
Salary
Salary:
Not provided
mozilla.org Logo
Mozilla
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of relevant hands-on experience in product and application security
  • 5+ years of experience and proficiency in secure coding practices, application security testing (SAST, DAST), threat modeling, and vulnerability assessment
  • Experience in one or more languages like Python, Go, Java, or JavaScript, required for automation and code review
  • Familiarity with security tools like Burp Suite, Nessus, and tools for CI/CD automation
  • Strong communication, collaboration, and problem-solving skills, with the ability to influence and guide cross-functional teams
Job Responsibility
Job Responsibility
  • Safeguard millions of users by embedding security into Firefox, Mozilla VPN, and other mission-critical products
  • Ensure software products are secure by embedding security into the full Software Development Life Cycle (SDLC)
  • Anticipate, prioritize and mitigate risks through proactive threat modeling, security assessments, security testing, and automation
  • Perform security code reviews
  • Lead penetration testing on web, mobile, and embedded applications, then guide remediation efforts
  • Develop and maintain automated security tests within CI/CD pipelines to catch vulnerabilities early
  • Partner with engineers to integrate security throughout the software development lifecycle—not as an afterthought, but as a core design principle. Provide security guidance, develop secure solutions, and facilitate secure releases
  • Help define and enforce security policies and provide security guidance to development teams
  • Help shape Mozilla's security culture through collaboration, guidance, and education
What we offer
What we offer
  • Generous performance-based bonus plans to all eligible employees - we share in our success as one team
  • Rich medical, dental, and vision coverage
  • Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute)
  • Quarterly all-company wellness days where everyone takes a pause together
  • Country specific holidays plus a day off for your birthday
  • One-time home office stipend
  • Annual professional development budget
  • Quarterly well-being stipend
  • Considerable paid parental leave
  • Employee referral bonus program
  • Fulltime
Read More
Arrow Right

Staff Security Engineer, Product Security

At Mozilla, we believe the internet is a global public resource—open and accessi...
Location
Location
Salary
Salary:
Not provided
mozilla.org Logo
Mozilla
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of relevant hands-on experience in product and application security
  • 5+ years of experience and proficiency in secure coding practices, application security testing (SAST, DAST), threat modeling, and vulnerability assessment
  • Experience in one or more languages like Python, Go, Java, or JavaScript, required for automation and code review
  • Familiarity with security tools like Burp Suite, Nessus, and tools for CI/CD automation
  • Strong communication, collaboration, and problem-solving skills, with the ability to influence and guide cross-functional teams
Job Responsibility
Job Responsibility
  • Safeguard millions of users by embedding security into Firefox, Mozilla VPN, and other mission-critical products
  • Ensure software products are secure by embedding security into the full Software Development Life Cycle (SDLC)
  • Anticipate, prioritize and mitigate risks through proactive threat modeling, security assessments, security testing, and automation
  • Perform security code reviews
  • Lead penetration testing on web, mobile, and embedded applications, then guide remediation efforts
  • Develop and maintain automated security tests within CI/CD pipelines to catch vulnerabilities early
  • Partner with engineers to integrate security throughout the software development lifecycle—not as an afterthought, but as a core design principle. Provide security guidance, develop secure solutions, and facilitate secure releases
  • Help define and enforce security policies and provide security guidance to development teams
  • Help shape Mozilla's security culture through collaboration, guidance, and education
What we offer
What we offer
  • Generous performance-based bonus plans to all eligible employees - we share in our success as one team
  • Rich medical, dental, and vision coverage
  • Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute)
  • Quarterly all-company wellness days where everyone takes a pause together
  • Country specific holidays plus a day off for your birthday
  • One-time home office stipend
  • Annual professional development budget
  • Quarterly well-being stipend
  • Considerable paid parental leave
  • Employee referral bonus program
  • Fulltime
Read More
Arrow Right

Staff Security Engineer, Product Security

At Mozilla, we believe the internet is a global public resource—open and accessi...
Location
Location
Salary
Salary:
Not provided
mozilla.org Logo
Mozilla
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 5+ years of relevant hands-on experience in product and application security
  • 5+ years of experience and proficiency in secure coding practices, application security testing (SAST, DAST), threat modeling, and vulnerability assessment
  • Experience in one or more languages like Python, Go, Java, or JavaScript, required for automation and code review
  • Familiarity with security tools like Burp Suite, Nessus, and tools for CI/CD automation
  • Strong communication, collaboration, and problem-solving skills, with the ability to influence and guide cross-functional teams
Job Responsibility
Job Responsibility
  • Safeguard millions of users by embedding security into Firefox, Mozilla VPN, and other mission-critical products
  • Ensure software products are secure by embedding security into the full Software Development Life Cycle (SDLC)
  • Anticipate, prioritize and mitigate risks through proactive threat modeling, security assessments, security testing, and automation
  • Perform security code reviews
  • Lead penetration testing on web, mobile, and embedded applications, then guide remediation efforts
  • Develop and maintain automated security tests within CI/CD pipelines to catch vulnerabilities early
  • Partner with engineers to integrate security throughout the software development lifecycle—not as an afterthought, but as a core design principle. Provide security guidance, develop secure solutions, and facilitate secure releases
  • Help define and enforce security policies and provide security guidance to development teams
  • Help shape Mozilla's security culture through collaboration, guidance, and education
What we offer
What we offer
  • Generous performance-based bonus plans to all eligible employees - we share in our success as one team
  • Rich medical, dental, and vision coverage
  • Generous retirement contributions with 100% immediate vesting (regardless of whether you contribute)
  • Quarterly all-company wellness days where everyone takes a pause together
  • Country specific holidays plus a day off for your birthday
  • One-time home office stipend
  • Annual professional development budget
  • Quarterly well-being stipend
  • Considerable paid parental leave
  • Employee referral bonus program
Read More
Arrow Right

Head of Product Security

The Head of Product Security leads the pillar responsible for ensuring everythin...
Location
Location
United Kingdom , London
Salary
Salary:
Not provided
barclays.co.uk Logo
Barclays
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • CSSLP, OSCP or similar certifications
  • Experience with PCI Software Security Framework (SSF) and its application to payment processing software
  • Previous career as a software engineer or developer before moving into security — you understand the developer experience from the inside
  • Experience with bug bounty programme management
  • Payments acquiring, FinTech, E-Pay - application security experience
  • Contributions to open-source security tools, OWASP projects, or published security research
  • Experience with security tooling for Kubernetes-native applications
  • Several years of progressive experience in application security or product security, with a number of years in a leadership role managing a product security or AppSec team
  • Deep understanding of modern application security: OWASP Top 10, API security (REST, gRPC, GraphQL), microservices security, container security, and secure coding practices
  • Proven experience building and running a security champions programme in an agile engineering organisation
Job Responsibility
Job Responsibility
  • Own and drive the shift-left security programme, ensuring security is integrated into the earliest stages of the software development lifecycle through threat modelling, secure design patterns, and automated tooling
  • Manage the security champions programme, recruiting, training, and supporting champions across all product squads
  • Own the developer security toolchain (SAST, DAST, SCA, secrets scanning) and ensure it is integrated into all CI/CD pipelines with minimal developer friction and calibrated thresholds to avoid noise
  • Establish and operate the vulnerability management lifecycle, including scanning orchestration, triage, prioritisation, SLA assignment, remediation tracking, and exception management
  • Chair the weekly Vulnerability Review Board, making prioritisation decisions on critical and high-severity findings in collaboration with engineering leads
  • Define and publish the security engagement model for product and engineering teams, including trigger points (new service, new integration, pre-release), SLAs, and escalation paths
  • Oversee threat modelling for new services and major changes, ensuring threat models are completed before development progresses beyond initial design
  • Own the security sign-off process for production releases, providing risk-based release decisions (approved, approved with conditions, deferred, escalated) rather than binary pass/fail gates
  • Provide self-service security capabilities to product teams: threat model templates, security stories backlog, secure coding guides, and accessible tooling documentation
  • Produce security assurance reporting for the CISO, including vulnerability trends, SDLC integration metrics, champion programme health, and developer satisfaction with security
What we offer
What we offer
  • Competitive holiday allowance
  • Life assurance
  • Private medical care
  • Pension contribution
  • Fulltime
Read More
Arrow Right

Hcm Security Product Lead

HCM Security is core to ensuring our users have the right access to the right ro...
Location
Location
United States , San Francisco; Sunnyvale
Salary
Salary:
211000.00 - 234000.00 USD / Year
uber.com Logo
Uber
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Proven experience in Oracle HCM Cloud security architecture and administration
  • Proven experience in the Technology Sector in a fast paced and dynamic environment
  • Deep understanding of RBAC frameworks, security profiles, and data roles within a complex HR ecosystem
  • Strong background in security compliance, audit requirements, and re-certification processes
  • Ability to manage technical backlogs and prioritize tasks based on business impact and risk
  • Excellent communication skills to align with leadership on security strategy and process improvements
Job Responsibility
Job Responsibility
  • Manage the Oracle HCM Security scope focusing on Security Model Governance
  • Oversee design and implementation of RBAC across HCM landscape
  • Manage lifecycle of user access including initial provisioning and periodic security re-certifications
  • Lead resolution of HR Security tickets and manage development backlog for security enhancements
  • Partner with HCM Security team and broader Data Products workstreams including Operational Reporting and Data Governance
What we offer
What we offer
  • Bonus program
  • Equity award
  • 401(k) plan
  • Various benefits
  • Fulltime
Read More
Arrow Right

Senior Product Security Consultant

The Product Security Consultant is a post-sales role that works closely with cus...
Location
Location
United States
Salary
Salary:
89300.00 - 120700.00 USD / Year
rapid7.com Logo
Rapid7
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • At least 5 years of technical experience working with security applications: Security Information and Event (SIEM)/ Log Management, Governance Risk Compliance (GRC), Identity Access Management, IDS/IPS, Advanced Persistent Threat, Anti-Virus, Vulnerability Management
  • Experience with scripting languages and databases: Python or Powershell
  • SQL
  • Interacting with APIs
  • Experience communicating highly technical concepts to a non-technical audience
  • Understanding of network technologies and protocols (e.g. DHCP, IP, DNS, HTTP, etc.)
  • Experience deploying and maintaining virtual machines and configuring policies on cloud platforms (e.g. Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP))
  • Administrator-level experience with Microsoft Windows Server, Linux and/or MacOS operating systems
  • Customer Centric Communication: Ability to translate complex technical concepts and security best practices into clear, actionable guidance for customers with varying levels of technical expertise
  • Technical Collaboration & Enablement: Ability to partner sales teams to provide technical expertise and support throughout the customer lifecycle, from pre-sales scoping to post-implementation success
Job Responsibility
Job Responsibility
  • Evaluate information technology architecture within customer environments across a broad range of industries and proportions to deploy Rapid7 products, and advise on security best practices within the scope of these products
  • Document and communicate design & implementation details to customer end users
  • Automate and customize solutions to enable customers to use Rapid7 products most efficiently via API scripting, reporting, and custom dashboard development
  • Support sales teams by providing enablement on available offerings and by providing scoping assistance during the sales cycle
  • Generate, Maintain and deliver R7 internal enablement materials to team members and cross-functional R7 partners, as well as team infrastructure, internal processes, tooling, and collateral
  • Willingness to travel up to 30%
  • Fulltime
Read More
Arrow Right

Senior Product Security Engineer

We are seeking a Senior Product Security Engineer with medical device experience...
Location
Location
United States
Salary
Salary:
127000.00 - 165000.00 USD / Year
themuse.com Logo
The Muse
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's degree in Computer Science, Information Security, or related field
  • 6+ years of experience in information security, with direct focus on product security for medical devices
  • Strong understanding of security principles, methodologies, and tools within the PDLC and SDLC
  • Demonstrated experience conducting Cybersecurity Risk Assessments (CSRAs), vulnerability analysis, and working with modern threat detection tools (Veracode, Snyk, GitLab, or similar)
  • Familiarity with NIST Cybersecurity Framework, NIST SP 800-171, and deeper controls/frameworks such as NIST SP 800-53 (Security and Privacy Controls), NIST SP 800-92 (Log Management), and NIST SP 800-63 (Digital Identity Guidelines)
  • Hands-on experience with vulnerability identification and threat modeling within healthcare using methodologies such as STRIDE
  • Experience operating in a regulated environment (FDA, HIPAA, GDPR, international regulatory frameworks)
  • Experience with medical device hardware or Software as a Medical Device (SaMD)
  • Experience with medical device software development and regulatory processes
  • Excellent problem-solving, analytical, and communication skills, able to take a multi-siloed approach
Job Responsibility
Job Responsibility
  • FDA Cybersecurity Compliance: Ensure compliance with FDA cybersecurity guidance and regulations in collaboration with Cybersecurity, Regulatory, Quality, and Systems Development teams
  • Risk Assessments & CSRAs: Conduct comprehensive security risk assessments, including Cybersecurity Risk Assessments (CSRAs), to identify vulnerabilities and threats across device hardware, firmware, software, and cloud components
  • Threat Modeling: Develop and maintain device-specific cyber threat models, factoring in patient safety, data privacy, and operational continuity
  • SBOM Management: Demonstrate familiarity with Software Bill of Materials (SBOM) and effectively communicate technical details
  • Security Documentation: Create and maintain cybersecurity documentation for pre- and post-market activities, ensuring regulatory alignment
  • Data Flow Diagrams: Produce detailed data flow diagrams to support the threat modeling process
  • Security Design Reviews: Participate in design reviews of medical device architectures and implementations, providing actionable recommendations for system security requirements
  • Vulnerability Analysis & Management: Perform and support vulnerability analysis and coordinate the vulnerability management program, including scanning, patching, and remediation for medical devices
  • Threat Detection Tools: Leverage and maintain application and threat detection tools (Veracode, Snyk, GitLab, or equivalent) to identify security flaws early in the SDLC
  • Incident Response: Support investigation and remediation of device-related security incidents, minimizing impact and preventing recurrence
What we offer
What we offer
  • FSA
  • HSA
  • Health Insurance
  • Dental Insurance
  • Vision Insurance
  • Life Insurance
  • Short-Term Disability
  • Long-Term Disability
  • FSA With Employer Contribution
  • HSA With Employer Contribution
Read More
Arrow Right

Senior Corporate Counsel - Security Product

Microsoft’s Corporate, External, and Legal Affairs (CELA) organization is seekin...
Location
Location
United States , Redmond
Salary
Salary:
Not provided
https://www.microsoft.com/ Logo
Microsoft Corporation
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Juris Doctor Degree or international equivalent degree AND 6+ years experience as a practicing attorney OR equivalent experience
  • Active license to practice law in a jurisdiction and capable of meeting admission requirements in relevant jurisdiction
Job Responsibility
Job Responsibility
  • Partner with product security and engineering teams to provide legal guidance across the product lifecycle, including feature development, security reviews, launches, and ongoing operations
  • Advise on how to operationalize security, compliance, and regulatory requirements within product design and development processes, consistent with Microsoft’s Secure Future Initiative and internal governance expectations
  • Interpret and apply global cybersecurity, product security, and technology regulatory requirements to product and engineering decisions
  • Collaborate with cross-functional stakeholders across security, privacy, compliance, and legal teams to drive aligned, scalable legal solutions
  • Support security incident and event response by advising on legal risk, regulatory considerations, and coordination across teams
  • Fulltime
Read More
Arrow Right