Sr Product Security Engineer | Remote | Europe

n8n is an open workflow orchestration platform built for the new era of AI, with over 260 employees working across Europe and the US and its center in Berlin. They have cultivated a community of over 650,000 active developers and builders, have 190K+ GitHub stars, and are backed by top investors, reaching a $5.2bn valuation.

• Hands-on experience with threat modeling and risk assessment of real-world systems
• Ability to validate security findings, reproduce vulnerabilities, and develop proof-of-concepts
• Experience in infrastructure, product, or application security within a product-focused organization
• Ability to act as an internal security consultant influencing teams and stakeholders
• Experience securing systems without direct ownership, translating findings into actionable requirements
• Fluency with AI & LLM tooling and understanding of associated limitations and risks
• Clear communication skills for explaining security risks and documented guidance

Deep expertise in at least two of:

• Application Security: security checks, guardrails, tooling, or guidance for secure software
• Platform Security: securing cloud providers and Kubernetes, including sandboxing and multi-tenancy
• Corporate Security: identity and access management, endpoint security, and data access controls
• Security Monitoring: logging, protective monitoring, and detection capabilities
• Security Assurance & Compliance: supporting SOC 2 or ISO 27001 from engineering perspective

Nice to have:

• Experience with bug bounty or coordinated vulnerability disclosure programs
• Experience assessing or securing LLM-powered apps and AI agents
• Familiarity with corporate IT platforms like Okta, Azure, or Drata
• Engagement with open-source ecosystems or communities including n8n
• Practical penetration testing experience
• Experience in early-stage security hiring or establishing security practices in startups

Threat Modelling, Risk Assessment & Security Design:

• Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems
• Partner with Engineering, Cloud, IT, and Data teams to review security designs and define security requirements
• Help teams embed security into development processes with secure coding guidance and security tooling

Security Operations & Incident Readiness:

• Establish and improve logging, detection, and monitoring capabilities
• Develop incident response processes, runbooks, and exercises
• Work with system owners to identify and remediate security gaps

Vulnerability Management & Coordinated Disclosure:

• Participate in security triage, assess vulnerability reports, and prioritize remediation
• Collaborate with engineering teams to coordinate and verify vulnerability fixes
• Manage vulnerability disclosure and bug bounty programs

Customer Trust & Compliance Engineering:

• Support SOC 2 compliance through continuous control monitoring and automated evidence collection
• Collaborate with Sales, Solutions Engineering, and Customer Success on customer security assessments
• Partner with Legal, Finance, IT, and other stakeholders to improve security policies and controls

n8n is an equal opportunity employer and does not discriminate based on race, religion, color, national origin, gender, sexual orientation, gender identity, age, marital status, veteran status, or disability status. Visa sponsorship is available only for Germany; candidates for other countries must have existing work authorization. The company language is English.