Staffbase is seeking a Senior Product Security Engineer in Berlin, Germany who will take ownership of tasks that improve security automation and strengthen our product security pipelines. You will proactively explore the use of AI for vulnerability detection and remediation, continuously learn how vulnerabilities apply to our SaaS product context, and support the team by applying software engineering solutions. You will collaborate closely with stakeholders across the product organization to gain broad exposure to how a growing SaaS company operates. You will maintain outbound email security metrics, manage our Web Application Firewall ruleset, oversee Kubernetes security, secure CI/CD pipelines, and maintain our central HTML sanitization service written in TypeScript. Requirements include practical knowledge of security topics (penetration testing, secure software development, vulnerability management, SAST/DAST), strong programming skills in TypeScript/JavaScript/Kotlin/Java/Go/Python, and experience with Unix and Kubernetes infrastructure (Terraform and Kustomize). Proficiency in English is required (German a plus). What you’ll get includes competitive compensation with LTIP, flexible/hybrid work options with a yearly flex work allowance of €1560, 31 vacation days (incl. floating holiday), a company pension scheme, and a Volunteers Day.

Staffbase is seeking a Senior Product Security Engineer in Berlin, Germany who will take ownership of tasks that improve security automation and strengthen our product security pipelines. You will proactively explore the use of AI for vulnerability detection and remediation, continuously learn how vulnerabilities apply to our SaaS product context, and support the team by applying software engineering solutions. You will collaborate closely with stakeholders across the product organization to gain broad exposure to how a growing SaaS company operates. You will maintain outbound email security metrics, manage our Web Application Firewall ruleset, oversee Kubernetes security, secure CI/CD pipelines, and maintain our central HTML sanitization service written in TypeScript. Requirements include practical knowledge of security topics (penetration testing, secure software development, vulnerability management, SAST/DAST), strong programming skills in TypeScript/JavaScript/Kotlin/Java/Go/Python, and experience with Unix and Kubernetes infrastructure (Terraform and Kustomize). Proficiency in English is required (German a plus). What you’ll get includes competitive compensation with LTIP, flexible/hybrid work options with a yearly flex work allowance of €1560, 31 vacation days (incl. floating holiday), a company pension scheme, and a Volunteers Day.