FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Product Security Lead
Implico Group. Take functional ownership of Security and Compliance within Product & Engineering .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Security and Compliance within Product & Engineering, with a strong focus on implementing security standards, processes, and technical controls. Proficient in translating regulatory requirements into actionable security measures and collaborating effectively with cross-functional teams.
Highest-signal resume keywords
Product SecurityApplication SecurityCloud SecurityDevSecOpsThreat Modeling
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security ArchitectureVulnerability ManagementSecure CodingSecurity TestingSoftware Supply Chain SecurityAutomated Security TestingDependency ScanningContainer ScanningSecrets ManagementSecurity Standards Definition
Soft Skills
Clear CommunicationStakeholder CollaborationPragmatic Implementation
Tools & Technologies
Microsoft AzureAWSSAP BTPCAPKymaKubernetesAPIsCI/CD
Certifications & Qualifications
PCI DSSOWASPNISTISO 27001
Industry Keywords
Security By DesignSSDLCDevSecOpsGenerative AILLM IntegrationsAccess ControlPrompt InjectionData Leakage
Tech Stack
Tools & technologiesAWSAzureCloudKubernetesMicroservices
About the role
Key responsibilities & impact- Take functional ownership of Security and Compliance within Product & Engineering
- Own Product & Engineering Security and continuously develop related standards, processes, technical controls and guardrails
- Embed Security by Design, SSDLC and DevSecOps into development processes
- Implement automated security testing, dependency and container scanning, and secrets management
- Translate PCI DSS and other regulatory or contractual requirements into technical measures, engineering processes and clear release criteria
- Define security standards for software and cloud landscapes including Microsoft Azure, AWS, SAP BTP, CAP, Kyma/Kubernetes, APIs and integration architectures
- Lead Threat Modeling, Security Architecture Reviews, Vulnerability Management and Penetration Tests
- Track required remediation measures
- Develop security guardrails for Generative AI, LLM integrations and AI Agents, including Access Control, Prompt Injection and Data Leakage
- Support Security Assessments, Audits and Certifications
- Collaborate with Product, Engineering, Enterprise Architecture, Cloud/DevOps and Corporate Information Security
Requirements
What you’ll need- Several years of hands-on experience in Product Security, Application Security, Cloud Security, Security Architecture or DevSecOps
- Strong technical understanding of modern software architectures and development environments, particularly APIs, microservices, containers, Kubernetes and CI/CD
- Practical experience with Threat Modeling, Secure Coding, Security Testing, Vulnerability Management and Software Supply Chain Security
- Good knowledge of PCI DSS and relevant standards and frameworks such as OWASP/OWASP ASVS, NIST or ISO 27001
- Experience translating compliance requirements into technical controls and reliable audit evidence
- Experience with Microsoft Azure and/or AWS
- Understanding of security risks and protection mechanisms related to Generative AI, LLMs and agentic systems
- Ability to bring technical and regulatory requirements together pragmatically, communicate them clearly and drive implementation with different stakeholders
- Knowledge of SAP BTP, CAP or Kyma is a plus
Benefits
Comp & perks- Mobile and flexible working
- Option to work temporarily from abroad by agreement
- Working time account for balancing work and personal commitments
- Works Council support and advice
- 30 days of annual leave
- Transparent career framework
- Individual learning and development opportunities
- Ongoing professional development support
- JobRad bicycle or e-bike leasing, including more than one bike
- WellPass access to a Germany-wide network of fitness, sports, wellness and health services
- Regular team and company events
- International working environment