Product Security Lead

Implico Group

. Take functional ownership of security and compliance within Product & Engineering .

Posted 11/11/2026full-timeRemote • GermanySeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security and compliance ownership within Product & Engineering, with a strong focus on implementing security standards, processes, and technical controls across cloud environments like Microsoft Azure and AWS. Proficient in translating regulatory requirements into actionable security measures and collaborating effectively with cross-functional teams.

Highest-signal resume keywords

Product SecurityApplication SecurityCloud SecurityDevSecOpsThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security ArchitectureVulnerability ManagementSecure CodingSecurity TestingAutomated Security TestingDependency ScanningContainer ScanningPCI DSSOWASPCI/CD

Soft Skills

CollaborationStakeholder Management

Tools & Technologies

Microsoft AzureAWSSAP BTPKymaKubernetesAPIsMicroservices

Certifications & Qualifications

ISO 27001

Industry Keywords

Security By DesignSSDLCDevSecOpsGenerative AILLM Integrations

Tech Stack

Tools & technologies

AWSAzureCloudKubernetesMicroservices

About the role

Key responsibilities & impact

Take functional ownership of security and compliance within Product & Engineering
Continuously develop security and compliance standards, processes, technical controls, and guardrails
Embed Security by Design, SSDLC, and DevSecOps into development processes
Implement and manage automated security testing, dependency and container scanning, and secrets management
Translate PCI DSS and other regulatory or contractual requirements into technical measures, engineering processes, and release criteria
Define security standards for Microsoft Azure, AWS, SAP BTP, CAP, Kyma/Kubernetes, APIs, and integration architectures
Manage threat modeling, security architecture reviews, vulnerability management, and penetration testing
Develop security guardrails for Generative AI, LLM integrations, and AI agents
Support security assessments, audits, and certifications
Collaborate with Product, Engineering, Enterprise Architecture, Cloud/DevOps, and Corporate Information Security

Requirements

What you’ll need

Several years of practical experience in Product Security, Application Security, Cloud Security, Security Architecture, or DevSecOps
Strong technical understanding of modern software architectures and development environments
Experience with APIs, microservices, containers, Kubernetes, and CI/CD
Practical experience with threat modeling, secure coding, security testing, vulnerability management, and software supply chain security
Good knowledge of PCI DSS as well as OWASP/OWASP ASVS, NIST, or ISO 27001
Experience translating compliance requirements into technical controls and robust audit evidence
Experience with Microsoft Azure and/or AWS
Knowledge of SAP BTP, CAP, or Kyma is a plus
Understanding of security risks and protective measures related to Generative AI, LLMs, and agentic systems
Ability to pragmatically align technical and regulatory requirements and implement them with diverse stakeholders

Benefits

Comp & perks

Support for mobile and flexible working
Option to work temporarily from abroad by arrangement
Working time account
Support from an engaged works council
30 days of annual leave
Transparent career system
Individual training and development opportunities
Active and sustainable support for continuing education and professional development
JobRad program for leasing a bicycle or e-bike, including multiple bicycles
WellPass access to fitness, sports, wellness, and health services throughout Germany
Regular team and company events
International working environment