Principal Engineer, Product Security (m/f/x)

Kurz zusammengefasst

commercetools is a cloud‑native commerce platform that enables large enterprises to create AI‑driven, API‑first shopping experiences across digital and physical channels. The company is looking for a Principal Engineer, Product Security to join its engineering organization and help shape the security posture of its multi‑cloud product suite. In this role you will define and promote a product security strategy, raise the overall security maturity, and build a standardized security architecture together with best‑practice operational guidelines. You will work closely with product teams to assess risk, conduct threat modelling, and embed security tooling into the development pipeline. Additional duties include reviewing designs, tracking remediation of security and technology risks, participating in external penetration‑test reviews, and leading customer discussions about product security. You will also drive security initiatives, support certification audits, and collaborate with product management, legal, and compliance partners. The posting does not specify formal qualifications, years of experience, language proficiency, or certifications as mandatory. No explicit educational or professional credentials are required according to the description. Preferred attributes include a creative, problem‑solving mindset, the ability to simplify complex challenges for others, and a strong curiosity for continuous learning. The role is hybrid, with three days per week in a Berlin, London, or Valencia office, offering the chance to work within a collaborative, trust‑focused team that values diverse perspectives. What the role asks for: