Senior Product Security Engineer

payabl.

. Build product security across the engineering organization .

Posted 9/18/2026full-timeRemote • Portugal, PolandSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Product Security and Application Security, with a strong focus on embedding security into the software development lifecycle and securing cloud-native applications. Proven ability to lead threat modeling, implement security practices, and influence engineering teams to adopt secure delivery methods.

Highest-signal resume keywords

Product Security ExperienceApplication Security ExpertiseThreat Modelling ProficiencyCI/CD Pipeline SecurityCloud Security Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SASTSCADASTThreat ModellingSecure-by-Design ReviewsCloud-Native Application SecurityContainer Image ScanningDependency ManagementInfrastructure-as-Code ChecksSecure Application Architecture

Soft Skills

Strong Ownership MindsetInfluencing Engineering TeamsEffective Communication

Tools & Technologies

Application Security ToolingAI-Assisted WorkflowsCI/CD ToolsCloud Platforms (AWS)

Industry Keywords

FintechPaymentsBankingE-MoneyEmbedded Finance

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Build product security across the engineering organization
Build the product security practice and report to the Head of Information Security
Embed security into the software development lifecycle from architecture and design through build, deployment, and remediation
Introduce security gates, secure release practices, and guardrails into engineering workflows
Select and operate application security tooling
Use AI and automation to increase security coverage without slowing product delivery
Lead threat modelling for new products and major changes
Provide secure-by-design input for products involving card issuing, embedded finance, banking-as-a-service, and other payment products
Define secure-by-default application architecture patterns for authentication, authorization, API design, and service-to-service trust
Evaluate traditional tooling versus AI-assisted alternatives
Own CI/CD pipeline and software supply-chain security controls
Implement and improve container image scanning, dependency management, software bills of materials, infrastructure-as-code checks, and deployment-manifest security checks
Introduce AI agents and LLM-assisted workflows as the default application-security delivery mechanism
Drive remediation of application-layer findings with engineering teams, including penetration-test, scanner, and disclosure-report findings

Requirements

What you’ll need

5+ years of experience in Product Security or Application Security in payments, fintech, banking, e-money, or another fintech product environment
Strong hands-on experience embedding security into the software development lifecycle
Ability to read code comfortably and contribute to design discussions with senior engineers
Proven experience with threat modelling, secure-by-design reviews, and working with engineers during architecture and delivery stages
Hands-on experience with SAST, SCA, secrets detection, and DAST
Hands-on experience securing cloud-native applications on AWS or other major cloud platforms
Strong AI proficiency and hands-on experience with agentic workflows and loops, RAG, MCP, etc.
Solid understanding of cloud-first environments and modern development practices
Experience securing CI/CD pipelines and improving software supply-chain security
Ability to work directly with engineering teams and influence secure delivery in practice
Strong ownership mindset and ability to define, implement, improve, and drive adoption of security practices across multiple teams
Strong written and verbal English

Benefits

Comp & perks

Annual Learning Budget for professional development (eligible after probation)
Company celebrations bringing colleagues from all offices together
Opportunities to participate in international company events and initiatives
Global collaboration with colleagues from all regions