IT Product Security Specialist (m/w/div.)
Core
Lead the Product Security Program by integrating security into the SDLC, conducting threat modeling, and managing risk analysis for product features and architecture.
Role type
Senior Product Security Program Lead
Builds
Secure CI/CD pipelines, automated security tooling, and compliance frameworks for diverse IT landscapes.
Domain
IT Security / Product Security / Regulatory Compliance
Deliverable
production ML models | product features | dashboards & analysis | client delivery | infrastructure
Required skills
Secure SDLC integration, Threat Modeling (STRIDE), Risk Assessment, Cloud Security, Vulnerability Triage, Incident Response, Regulatory Compliance (NIS2, Cyber Resilience Act), Security Training & Enablement, Stakeholder Management, Agile/DevOps environments
Preferred skills
CISM or CISSP certification
Technologies
SCA, SAST, DAST, Secret Scanning, CI/CD Pipelines
Responsibilities
Integrate security into the SDLC, conduct threat modeling, lead security requirements for features, perform risk analyses, collaborate with Product Managers on roadmaps, develop secure tooling and automation, manage vulnerability triage and remediation, participate in incident response, monitor regulatory requirements, create security training and enablement initiatives, report security metrics to management.
Seniority
Senior, hands-on IC with program leadership