Product Security Engineer

Bloomreach

. Act as the designated security focus on a specific product domain .

Posted 11/3/2026full-timeRemote • SlovakiaJuniorMid-Level💰 €28,114 - €35,143 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity and application security, with a strong focus on threat modeling, vulnerability management, and secure software development practices. Proficient in conducting security assessments and penetration testing while collaborating effectively with cross-functional teams.

Highest-signal resume keywords

Cybersecurity ExperienceThreat ModelingVulnerability ManagementPenetration TestingApplication Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security AssessmentsVulnerability ValidationRisk-Based PrioritizationOWASP StandardsApplication Security ConsiderationsAPI SecurityAuthentication MechanismsAuthorization MechanismsSecure Development PracticesContinuous Learning

Soft Skills

Strong Communication SkillsSelf-MotivatedProactiveCollaborativeProcess Improvement

Tools & Technologies

Burp SuiteOWASP ZAPNmapSAST ToolsSCA Tools

Industry Keywords

Application SecurityProduct SecurityThreat Modeling ConceptsEmerging TechnologiesAI Security Risks

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Act as the designated security focus on a specific product domain
Drive threat modeling, security assessments, and vulnerability management across Bloomreach's platform
Support implementation and adoption of Secure Software Development Lifecycle practices across engineering teams
Review application designs, system architectures, and infrastructure components to identify security risks and recommend mitigations
Participate in threat modeling for new and existing products; identify threats, assess risk, and document recommendations
Provide security guidance to product and engineering teams using established standards, patterns, and best practices
Conduct security assessments, penetration testing, and validation testing across applications and environments
Triage, validate, assign, and support remediation of vulnerabilities
Collaborate with Engineering, DevOps, Compliance, and other cross-functional teams
Serve as a security point of contact for routine security questions and activities
In the first 30 days, learn Bloomreach products, architecture, services, policies, tools, and security workflows; establish partner relationships
In the first 60 days, contribute to penetration tests and assessments, threat modeling, vulnerability triage, validation, and remediation recommendations
In the first 90 days, independently perform defined assessments, contribute to threat modeling, communicate findings, support remediation, provide routine security guidance, own assigned activities, and improve processes, documentation, tooling, or workflows

Requirements

What you’ll need

2+ years of hands-on experience in cybersecurity, application security, product security, or a related security discipline
Practical experience performing or supporting security assessments and penetration testing of web applications
Familiarity with threat modeling concepts and methodologies such as STRIDE
Understanding of vulnerability management fundamentals, including validation, risk-based prioritization, remediation tracking, and retesting
Exposure to AI and LLM technologies, with interest in associated security risks and controls
Working knowledge of modern application architectures, APIs, authentication and authorization mechanisms, and common application security considerations
Knowledge of OWASP standards and resources, including OWASP Top 10, Testing Guide, and secure development practices
Hands-on experience with or familiarity with Burp Suite, OWASP ZAP, Nmap, SAST/SCA tools, and other application security technologies
Ability to analyze and validate security findings and prioritize vulnerabilities based on technical risk and business context
Strong communication skills and ability to document findings and communicate technical concepts
Self-motivated and proactive; willing to learn, take ownership, and contribute to process improvements
Ability to collaborate with Security, Engineering, DevOps, and other cross-functional teams
Continuous learning mindset and interest in emerging technologies and threats
Excellent command of English, including listening, speaking, reading, and written communication

Benefits

Comp & perks

A great deal of freedom and trust; no clocking in and out, corporate rules, or long approval processes
Flexible working hours
Virtual-first work with Bloomreach Hubs across three continents
Company events
5 paid days off to volunteer
People Development Program with personal development workshops
Communication coach support
$1,500 annual professional education budget for books, courses, certifications, etc.
Employee Assistance Program with counselors
Calm subscription
One additional DisConnect day off each quarter
Sports, yoga, and meditation opportunities
Extended parental leave up to 26 calendar weeks for Primary Caregivers
Restricted Stock Units or Stock Options, depending on role, seniority, and location
Company performance bonus
Employee referral bonus of up to $3,000
Work anniversary rewards and celebrations