Tellent

Principal Product Security Engineer

322.4k - 410k PLN322 380 - 410 000 PLN/ rok./ rok.UoPUmowa o pracę (brutto)

322.4k - 410k PLN322 380 - 410 000 PLN/ rok./ rok.B2BB2B (netto)

SeniorZdalnie·PoznańFull-time·Umowa o pracę·B2B

#460360·Dodano 19 dni temu·2

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Analytical ThinkingAISecurity

Podsumowanie oferty

You will shape how Tellent designs, builds, and ships secure software across its talent-management products. The role combines hands-on product security reviews and offensive testing with threat modelling and systemic secure-by-default improvements, using Aikido for application security tooling.

Wymagania

Deep hands-on application or product security experience, ideally gained across engineering and security roles.
Strong examples of vulnerabilities personally identified, including how the hypothesis was formed, impact demonstrated, and issue fixed.
Strong understanding of access control and multi-tenancy, authentication and authorization, session management, injection vulnerabilities, SSRF, deserialization, business logic abuse, and supply-chain risk.
Hands-on engineering skills, including comfort reading and writing production code and reasoning about unfamiliar systems and technologies.
Experience threat modelling real systems and translating findings into practical engineering work.
Working knowledge of cloud security, containers, CI/CD, and infrastructure as code.
A technology-agnostic mindset and comfort moving between languages, stacks, and environments.
Excellent communication skills, including explaining vulnerabilities to engineers and discussing trade-offs with senior stakeholders.
A collaborative, low-ego approach to product security and building relationships with teams.

Nice to have:

Experience with AI and LLM application security, including prompt injection, excessive agency, and data leakage through model context or RAG.
Experience with privacy engineering, identity systems such as OAuth 2.0, OIDC, and SAML, offensive security, company or platform integrations, or building a product security practice from an early stage.
Certifications such as OSCP, CISSP, CISM, or CSSLP are welcome but not required.
Familiarity with technologies already used across Tellent is helpful; knowing the entire stack is not expected.

Obowiązki

Perform deep manual security reviews and offensive testing across services, APIs, and clients, focusing on authorization, multi-tenancy, business logic, and other high-risk areas.
Threat model high-risk product surfaces, including new AI functionality, and help teams develop the skills to run this practice themselves.
Own the technical strategy for application security tooling, currently Aikido, focusing on actionable signal, developer experience, and low false-positive rates.
Triage vulnerabilities from internal tooling, penetration tests, and external researchers; make defensible severity calls and work with teams to verify fixes.
Identify patterns and root causes across findings and build systemic fixes, secure-by-default libraries, and paved paths to prevent vulnerabilities recurring.
Develop secure development standards for engineers’ day-to-day work.
Partner with the Security team on the bug bounty programme, pentest remediation, security champions network, and training based on real findings.
Act as a senior technical partner for product security incidents and when security or privacy commitments require engineering controls.
Shape and own the product security roadmap across Backend, Frontend, QA, DevOps, Product, and Security.

Benefity

€1500 annual learning budget.
For an employment contract, 26 paid holiday days and 2 wellbeing days.
Wellness perks including Multisport and private healthcare through LuxMed.
Apple MacBook, displays, and other tools needed for the role.
€200 home-office budget and a work-from-home allowance.

Dofinansowanie szkoleń

Karta sportowa

Opieka zdrowotna

Płatne święta

Inne informacje

Work from anywhere for up to 4 weeks per year.
The company uses internally developed AI tools to support recruitment, but every candidate is personally reviewed by the team.

Tellent

2 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz