As a Product Security Engineer, you'll play a key role in securing biometric technologies deployed in high-impact environments such as national identity programs, border security, and election systems. Your focus will be on integrating robust security practices throughout the software development lifecycle, ensuring resilience across both SaaS and on-premises platforms.
What You'll Do
- Assess and enhance security in software architecture, deployment models, and engineering workflows
- Map current secure development practices and identify improvement areas in product and infrastructure security
- Develop a practical security roadmap that aligns with engineering constraints and business goals
- Lead threat modeling sessions and security design reviews to catch risks early
- Strengthen security in Kubernetes, cloud environments, and CI/CD pipelines
- Implement vulnerability management and secure release protocols, with authority to block releases when critical issues arise
- Act as a technical security advisor, influencing both developers and leadership
- Simulate adversarial techniques to test detection and harden systems against injection attacks
- Collaborate with internal teams on ISO 27001 compliance and audit readiness
- Help evolve product security into a measurable, integrated discipline within engineering
What We're Looking For
- Proven experience embedding security into software development and deployment pipelines
- Familiarity with securing both cloud-hosted and on-premises systems
- Understanding of how ISO 27001 controls apply in engineering and development contexts
- Hands-on background in penetration testing and offensive security techniques
- Experience with Kubernetes, cloud platforms, and automated CI/CD workflows
- Ability to define and adapt security strategy in agile, fast-moving environments
- Strong communication skills to collaborate across technical teams and leadership
Work Environment
This is a hybrid role open to candidates based in Slovakia, Brno, or elsewhere in the EU. You'll need regular overlap with Central European Time for collaboration. The culture values trust, technical ownership, and delivering responsible technology with real-world impact.
