Software Engineer, Security (Product) Job at Lovable (Stockholm)

Software Engineer, Product Security

Millions of people use Notion — and this number is increasing every day. Our use...

Location

United States , San Francisco; New York

Salary:

240000.00 - 290000.00 USD / Year

Notion

Expiration Date

Until further notice

Requirements

Security architecture and expertise: experience building systems to secure and monitor cloud architectures
experience in threat modeling
experience securing a cloud-based infrastructure (e.g. AWS)
experience designing a secure development life cycle (design reviews, CI / CD integrations, bug bounty program)
experience in application security consulting
experience in secure library and framework development
experience in vulnerability discovery and response
experience implementing core security features like authentication to detecting and mitigating malicious activity
experience in offensive thinking (e.g. pentesting, red teaming)
experience debugging systems in production

Job Responsibility

Help scale the engineering organization and mentor engineers on best practices in secure software design and architecture
enable the growth of Notion’s business by building a secure foundation that earns the trust of Notion’s users
design, implement, and (where possible) automate a software development life cycle that balances good vulnerability and risk detection coverage with developer velocity
act as a liaison for multiple stakeholders across product, engineering, go to market, and security ops / compliance, to guide and prioritize the right security investments
participate in security assessments and advise on on both internal and customer security and privacy needs (e.g. SOC2, ISO 27001, GDPR, penetration testing, enterprise asks)

Fulltime

Senior Product Security Software Engineer

Crusoe is building the infrastructure for the next era of AI and high-performanc...

Location

United States , San Francisco

Salary:

175000.00 - 215000.00 USD / Year

Crusoe

Expiration Date

Until further notice

Requirements

7+ years of experience shipping production software with strong system design skills
Deep expertise in Golang and Node.js/JavaScript, with experience building and debugging distributed systems
Hands-on experience securing gRPC services, REST APIs, and microservice architectures
Strong background implementing authentication and authorization systems using OAuth2, OIDC, SAML, JWT, and RBAC/ABAC models
Production experience with application security tooling (SAST, DAST, SCA) and CI/CD integration (e.g., Semgrep, OWASP ZAP, Burp, GitLab)
Knowledge of runtime application security and observability tools
Solid understanding of cloud-native and containerized environments (Docker, Kubernetes) and network security fundamentals
Strong grasp of OWASP Top 10, secure coding practices, cryptography, and secure design principles

Job Responsibility

Design and build secure frameworks and patterns for high-performance AI workflows, agents, and models to protect our clients
Create reusable security patterns for product microservices, focusing on service-to-service authorization, API security, and multi-tenant data isolation that scales across product lines
Create developer-facing tools and automation that catch security issues early in the development cycle without slowing teams down
Perform security reviews, penetration tests, code reviews, and system design reviews for Crusoe’s fleet of SaaS offerings

What we offer

Restricted Stock Units in a fast growing, well-funded technology company
Health insurance package options that include HDHP and PPO, vision, and dental for you and your dependents
Employer contributions to HSA accounts
Paid Parental Leave
Paid life insurance, short-term and long-term disability
Teladoc
401(k) with a 100% match up to 4% of salary
Generous paid time off and holiday schedule
Cell phone reimbursement
Tuition reimbursement

Fulltime

Security Engineer, Product Security

We are seeking a highly technical Security Engineer to join our Product Security...

Location

United States , New York, NY; San Francisco, CA; Seattle, WA; Washington, DC

Salary:

237600.00 - 297000.00 USD / Year

Scale

Expiration Date

Until further notice

Requirements

Demonstrated ability to drive multi-month security initiatives independently, from problem definition through execution, without requiring significant direction
Proven experience as a Security Engineer with a focus on product security
Proficiency in NodeJS, TypeScript, Python, and/or Kubernetes
Strong understanding of modern Javascript application design
Production experience operating and securing AWS infrastructure at scale
Hands-on experience with SAST and DAST tools and methodologies
Familiarity with terraform orchestration for infrastructure management
You can structure complex problems and diagnose root causes independently, providing actionable insights without requiring manager input
Excellent communication skills, with the ability to clearly present technical concepts and their implications to both technical and non-technical stakeholders
Demonstrated ability to influence security strategies and drive improvements within a team

Job Responsibility

Leverage broad product security expertise to build and maintain software tooling that secures every layer of the modern AI/ML software ecosystem
Conduct in-depth code reviews to identify and remediate security vulnerabilities
Evaluate and enhance the security of our product offerings, through RFC and service review
Implement and maintain CI/CD pipelines with a strong focus on security
Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify vulnerabilities in production code
Utilize terraform orchestration to ensure secure and efficient infrastructure management
Guide engineering teams to build robust long-term solutions that consider security and privacy
Clearly explain the mechanics and significance of security vulnerabilities, including their exploitability and potential impact
Influence the security strategy and direction of the team, advocating for best practices and continuous improvement

What we offer

Comprehensive health, dental and vision coverage
retirement benefits
learning and development stipend
generous PTO
commuter stipend

Fulltime

Security Engineer, Product Security

Location

Germany , Berlin

Salary:

Not provided

Staffbase

Expiration Date

Until further notice

Requirements

Practical knowledge of security topics (e.g. penetration testing, secure software development, vulnerability management, SAST, DAST)
Programming knowledge, preferably one of the following: TypeScript, JavaScript, Kotlin, Java, Go, or Python
Practical knowledge of Unix basics and Kubernetes infrastructure, preferably managed via Terraform and Kustomize
Strong communication skills in English (German is a plus)

Job Responsibility

Take ownership of tasks that improve our security automation and strengthen our product security pipelines
Proactively explore the use of AI for vulnerability detection and remediation
Continuously learn and share knowledge about how vulnerabilities apply in our specific product context
Support the team by enhancing our services with software engineering solutions
Collaborate closely with stakeholders across the product department and gain broad exposure to how a growing SaaS company operates
Maintain our outbound e-mail security by regularly reviewing the related metrics
Maintain our Web Application Firewall ruleset
Maintain our central HTML sanitization service written in Typescript

What we offer

Competitive Compensation - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan)
Flexibility - we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560
Recharge - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August
Support - we’re offering a company pension scheme
Volunteers Day - you’ll get one day off per year for supporting a social project

Staff Security Software Engineer - Security Operations

The Role GM’s Cybersecurity Team safeguards the company’s global information ...

Location

United States , Austin

Salary:

Not provided

General Motors

Expiration Date

Until further notice

Requirements

8+ years in software engineering with a focus on distributed systems, security integrations, and data platforms
Deep expertise building event-driven, horizontally scalable services and contract-first APIs
Track record productizing AI in security workflows (multi-agent patterns, RAG at scale, evaluation harnesses, guardrails, red-teaming)
Cloud architecture depth (Azure/AWS/GCP), including networking, Kubernetes, service meshes, observability stacks, and IaC at scale
Data platform expertise: streaming (Kafka/Event Hub/PubSub), vector/search (pgvector/FAISS/Pinecone), schema/versioning, governance/lineage
Demonstrated org-wide influence: authored standards, drove cross-team adoption, led multi-quarter programs to successful outcomes
Exceptional communication with executives
ability to frame risk, ROI, and tradeoffs succinctly

Job Responsibility

Set the reference architecture for security data integration and AI orchestration (agents, policy-guard railed workflows, governance)
Lead cross-org programs that unify SIEM/EDR/IAM/SSPM/CSPM/ITSM/cloud data models and establish single sources of truth
Operationalize AI at scale with safety, privacy, and governance—including data retention, PII controls, model routing, evaluation, and fallback strategies
Drive cost/performance optimization (throughput, latency, storage tiering, vector index strategies) for high-volume security telemetry
Influence vendor strategy and negotiate integration roadmaps
guide build-vs-buy decisions and multi-year investments
Mentor/coach Staff/Senior engineers
build a culture of design excellence, pragmatic risk management, and measurable outcomes
Communicate upward with crisp executive narratives, metrics, and business impact framing

What we offer

Relocation benefits

Fulltime

Senior Security Software Engineer - Security Operations

The Role GM’s Cybersecurity Team safeguards the company’s global information ass...

Location

United States , Warren

Salary:

125200.00 - 158600.00 USD / Year

General Motors

Expiration Date

Until further notice

Requirements

5-7 years in software security engineering
advanced proficiency in modern programming languages
Expert in API development, microservices, event streaming, and idempotent integration patterns
Experience deploying software using any modern CI/CD pipeline and automated delivery practices
Hands-on with security tooling integrations (e.g., SIEM, EDR, SSPM)
Proven AI integration experience: LLM agents, embeddings, vector databases, RAG, prompt engineering
Cloud proficiency (Azure/AWS/GCP) and IaC (Terraform/Bicep/ARM/CloudFormation)
Data engineering fluency: ETL/ELT, schema design, normalization/enrichment
formats (JSON, YAML, syslog, STIX/TAXII)
Excellent cross-functional communication

Job Responsibility

Own architecture & delivery for complex integration services (APIs, microservices, event-driven workflows) with production SLIs/SLOs
Build AI-driven workflows (RAG, summarization, classification, agents) that augment investigations, triage, and orchestration
Create reusable connectors bridging SIEM/EDR/IAM/SSPM/ITDR/ITSM and cloud telemetry with robust error handling, retries, and DLQs
Implement security automation (SOAR-like playbooks) that enrich alerts and trigger deterministic + AI-assisted responses
Harden and observe services with CI/CD, automated testing, performance profiling, metrics, and incident runbooks
Mentor engineers and lead technical design reviews, coding standards, and reference implementations
Translate requirements into clear epics/roadmaps
align stakeholders and deliver on time with quality

What we offer

medical
dental
vision
Health Savings Account
Flexible Spending Accounts
retirement savings plan
sickness and accident benefits
life insurance
paid vacation & holidays
incentive pay program based on company, job level, and individual performance

Fulltime

Senior Application Security / Product Security Engineer

We are seeking an experienced Application Security / Product Security Engineer t...

Location

India , Mumbai

Salary:

Not provided

Galaxy Office Automation Pvt. Ltd.

Expiration Date

Until further notice

Requirements

Strong understanding of Application Security and Product Security principles
Experience with secure SDLC practices
Hands-on experience performing security testing for Web applications, APIs, Mobile apps, Thick client applications
Knowledge of cloud platforms (AWS / Azure / GCP) and cloud security architecture
Experience performing security design reviews and threat modeling
Familiarity with OWASP Top 10, API Security Top 10, and common vulnerability classes
Experience using security tools such as SAST, DAST, SCA
API testing tools
Good working knowledge of Excel for tracking vulnerabilities, metrics, and reporting
Strong task management and stakeholder coordination skills

Job Responsibility

Integrate security practices into the Software Development Lifecycle (SDLC)
Perform application security design reviews for new and existing products
Conduct manual and automated security testing of Web applications, REST / GraphQL APIs, Mobile applications (Android / iOS), Thick client / desktop applications
Identify vulnerabilities such as OWASP Top 10, authentication issues, authorization flaws, and API security risks
Review cloud architecture and deployments (AWS, Azure, GCP) for security best practices
Work with development teams to prioritize and remediate vulnerabilities
Perform threat modeling and security architecture assessments
Track vulnerabilities, remediation status, and risk metrics using Excel or vulnerability management tools
Support secure coding practices and developer security awareness
Manage multiple security assessments and coordinate tasks across teams

Fulltime

Application Security / Product Security Engineer

We are looking for an Application Security / Product Security Engineer to suppor...

Location

European Union

Salary:

Not provided

Itransition

Expiration Date

Until further notice

Requirements

2–5 years of experience in Application Security, Product Security, DevSecOps, Security Operations, or related cybersecurity roles
General understanding of Secure SDLC and application security principles
Experience working with security tools or processes related to vulnerability management, CI/CD security, or dependency/security scanning
Familiarity with Jira or similar ticketing/tracking systems
Understanding of common application security risks and vulnerabilities
Ability to document processes and communicate effectively with technical teams
English skills sufficient for technical communication and participation in project discussions

Job Responsibility

Support Software Composition Analysis (SCA) processes and open-source license compliance activities
Help implement and maintain secret detection practices, including pre-commit hooks and CI/CD secret scanning
Participate in vulnerability management activities: vulnerability scanning, triage and prioritization, Jira ticket tracking, remediation follow-up and SLA monitoring
Collaborate with engineering teams to improve Secure SDLC and CI/CD security practices
Support security tooling integrations within CI/CD pipelines (e.g., GitHub Actions)
Maintain security-related documentation and assist with audit/compliance activities
Contribute to asset inventory and security governance processes
Work with development and infrastructure teams to improve overall security posture

What we offer

Projects for such clients as PayPal, Wargaming, Xerox, Philips, Adidas and Toyota
Competitive compensation that depends on your qualification and skills
Career development system with clear skill qualifications
Flexible working hours aligned to your schedule
Options to work remotely
Corporate medical insurance covering services of private and public medical centers
English courses online
Corporate parties and events for employees and their children
Internal conferences, workshops and meetups for learning and experience sharing
Gym membership compensation

Fulltime

Select Country

Software Engineer, Security (Product)

Job Description

Job Responsibility

Requirements

Nice to have

Looking for more opportunities?