Product Security Engineer (Application & Cloud Security)

About the role

We are looking for a hands‑on Product Security Engineer to partner with engineering teams and embed security into every layer of our platform. You will protect our applications, cloud infrastructure, APIs and development lifecycle while helping teams adopt secure coding practices.

Key responsibilities

• Review application architecture and new features for security risks.
• Identify and remediate vulnerabilities in backend services, APIs, mobile and web platforms.
• Perform threat modeling, security design reviews and support penetration‑testing activities.
• Build and improve a Secure SDLC, integrating security tooling into CI/CD pipelines.
• Strengthen cloud security – Kubernetes hardening, IAM policies, secrets management and infrastructure monitoring.
• Deploy and maintain SAST, DAST, dependency, container and secret‑detection scanners and automate security checks.

Required profile

• 4+ years of experience in product, application or security engineering.
• Strong software‑engineering background with experience securing backend systems, REST APIs and micro‑services.
• Hands‑on experience with AWS, GCP or Azure and deep knowledge of Kubernetes, Docker, networking and infrastructure security.
• Proven work with Secure SDLC, security automation and tools such as SAST, DAST, dependency and container scanning.
• Solid understanding of OWASP Top 10, common attack vectors and secure coding practices.
• Fluent English and ability to influence engineering decisions.

Required skills

• AWS, GCP or Azure
• Kubernetes and Docker
• CI/CD pipeline integration
• SAST, DAST, dependency scanning, container scanning, secret detection
• IAM policies and secrets management
• REST APIs, micro‑services, networking
• OWASP Top 10 knowledge

What we offer

• Professional growth: up to 100 % coverage for courses, conferences and English learning.
• Flexible work mode – remote or hybrid with international teams.
• Paid leave: up to 20 vacation days + 8 company holidays + 5 personal days.
• Recognition programs, structured performance reviews and team awards.
• Team retreats in international locations (e.g., company apartments in Cyprus).