Senior Product Security Engineer, Cloud

JetBrains

. Lead and continuously improve cloud security across JetBrains Air, including security posture, preventive controls, detection, and remediation .

Posted 9/30/2026full-timeBerlin • GermanySeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security engineering, focusing on AWS and GCP environments, with a strong emphasis on security architecture, vulnerability management, and risk assessment. Capable of integrating security practices into development workflows and collaborating with engineering teams to enhance security posture.

Highest-signal resume keywords

AWS SecurityGCP SecuritySecurity Architecture ReviewsVulnerability ManagementThreat Modeling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringCloud SecurityRisk AssessmentSecurity AutomationInfrastructure-as-CodeCI/CDKubernetes SecurityScriptingSecurity Compliance FrameworksMicroservices

Soft Skills

Excellent Written CommunicationExcellent Spoken Communication

Tools & Technologies

WizOrca SecurityUpwindTenableTerraform

Industry Keywords

SaaS ProductsCloud-Native ServicesSecurity PosturePreventive ControlsDetection EngineeringCloud Security FindingsSecurity StandardsSecure Engineering Patterns

Tech Stack

Tools & technologies

AWSCloudGoogle Cloud PlatformKubernetesMicroservicesTerraform

About the role

Key responsibilities & impact

Lead and continuously improve cloud security across JetBrains Air, including security posture, preventive controls, detection, and remediation
Define, maintain, and measure security baselines for AWS and GCP environments covering IAM, networking, data protection, and workload configuration
Operate and evolve cloud security and vulnerability-management platforms
Establish processes for triaging, prioritizing, assigning, and remediating cloud security findings and vulnerabilities
Partner with platform engineering, SRE, and product engineering teams to implement practical security controls in developer workflows
Perform security design and architecture reviews for cloud services, APIs, and integrations
Conduct threat modeling and risk assessments and provide actionable recommendations
Review product and platform changes for security implications throughout the software development lifecycle
Integrate security checks, guardrails, and evidence into engineering and delivery pipelines
Support incident response and root-cause analysis and drive systemic improvements
Develop security metrics, communicate trends and risks, and help prioritize security investments
Contribute to security standards, guidance, runbooks, and secure engineering patterns
Establish measurable security baselines, reduce actionable findings, and build trust so threat modeling and security reviews occur early in design

Requirements

What you’ll need

Established professional experience in security engineering or a closely related technical security domain, securing SaaS products or cloud-native services
Strong experience with AWS and/or GCP security, including direct assessment of architectures and configurations
Practical experience deploying, operating, or integrating cloud security and vulnerability-management platforms such as Wiz, Orca Security, Upwind, or Tenable
Hands-on experience with security architecture reviews, threat modeling, vulnerability management, and risk-based prioritization
Solid understanding of modern SaaS architectures, including APIs, microservices, containers, Kubernetes, identity providers, networking, and managed cloud services
Experience working with engineering, SRE, and product teams to translate security requirements into practical engineering solutions
Excellent written and spoken English
Experience with security automation, CI/CD, infrastructure-as-code, Terraform, Kubernetes security, detection engineering, cloud-native logging and monitoring, scripting or programming, security compliance frameworks, or customer-facing security conversations is nice to have

Benefits

Comp & perks

Strong base salary; competitive pay reflecting skills and experience
Flexible work location: work from home or from the office
Up to 30 days per year working remotely from abroad
Extra time off
Medical insurance allowance for you and your family
Learning and development opportunities, including conferences, courses, and language classes
Relocation support
Language classes
Hot meal or lunch allowance on workdays
Professional mental health services
On-site gym or sports club stipend
Company-wide celebrations and team gatherings