Senior Product Security Engineer

<div class="content-intro"><h3><strong>About Staffbase</strong></h3> <p>We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first <strong>AI-native Employee Experience Platform</strong>. Our<strong> industry-leading and award-winning agentic AI communications channels</strong> - intranet, employee app and email solutions - create engaging experiences that connect and empower employees.</p> <p>Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 550+ employees supports 1,500+ customers—reaching over 14 million employees—in transforming their employee experience.<br>We are proud to be a <strong data-stringify-type="bold">Unicorn</strong> company—privately valued at over $1 billion—demonstrating strong growth, innovation, and lasting impact in our industry. Together, we’re shaping the future of workplace communication.</p></div><p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">At Staffbase, security is at the heart of everything we build. Our Product Security team helps keep our products and customer data secure while enabling engineering teams across the company. We believe the best security work happens when people bring their authentic selves and diverse perspectives to the table and we’re proud of the unique mix of talents and backgrounds in our team.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">As an enablement team, we provide tools, guidance, and insights that allow developers to integrate security early in the development process. We see security not as a blocker but as a trusted partner that is the foundation for better products. With us, you’ll get hands-on experience with modern security practices, mentorship from experienced engineers, and the chance to make a visible impact in a global SaaS environment.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">We work together with curiosity, humility, and a growth mindset, supporting each other, taking ownership of our contributions, and celebrating progress along the way. Here, your ideas matter, your work will shape how we build secure products, and you’ll have space to grow into new challenges.</span></p> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><strong>What you’ll be doing </strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Take ownership of tasks that improve our security automation and strengthen our product security pipelines</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Proactively explore the use of AI for vulnerability detection and remediation</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Continuously learn and share knowledge about how vulnerabilities apply in our specific product context</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Support

the team by enhancing our services with software engineering solutions</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Collaborate closely with stakeholders across the product department and gain broad exposure to how a growing SaaS company operates</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Maintain our outbound e-mail security by regularly reviewing the related metrics</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Maintain our Web Application Firewall ruleset</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Kubernetes security</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">CI/CD pipelines security</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Maintain our central HTML sanitization service written in TypeScript</span></li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><strong>What you need to be successful </strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Practical knowledge of security topics (e.g. penetration testing, secure software development, vulnerability management, SAST, DAST)</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Strong programming skills, preferably one of the following: TypeScript, JavaScript, Kotlin, Java, Go, or Python</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Practical knowledge of Unix and Kubernetes infrastructure, preferably managed via Terraform and Kustomize</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;">Strong communication skills in English (German is a plus)</span></li> </ul> <p><span style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><strong>What you'll get </strong></span></p> <ul> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><em>Competitive

Compensation</em> - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan)</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-size: 14pt; font-family: arial, helvetica, sans-serif;"><em>Flexibility </em>- we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><em>Recharge</em> - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August</li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-size: 14pt; font-family: arial, helvetica, sans-serif;"><em>Support</em><strong> </strong>-<strong> </strong>we’re offering a company pension scheme</span></li> <li style="font-family: arial, helvetica, sans-serif; font-size: 14pt;"><span style="font-size: 14pt; font-family: arial, helvetica, sans-serif;"><em>Volunteers Day</em><strong> </strong>- you’ll get one day off per year for supporting a social project</span></li> </ul><div class="content-conclusion"><h3><strong><img src="https://imgur.com/a/kIbq0q5" alt="" style="max-width: 100%;"></strong></h3></div>