security engineer for ecommerce platforms

Описание:Storio group operates an ecommerce platform.Задачи:Collaborate with engineers, architects, and product teams to turn security challenges into pragmatic solutionsMentor engineers and Security Champions to embed security within the engineering cultureBuild and enable security automation that improves security outcomes while reducing friction for engineering teamsLead threat modelling and security architecture reviews for key products and technology initiativesExperiment with and adopt AI tools to automate security engineering workflows and boost productivityDefine security principles, standards, patterns, and guardrails that enable engineers to build securelyShape the strategic technical direction of Product Security across the platform and engineering organisationProvide hands‑on security expertise across APIs, microservices, AWS cloud infrastructure, authentication, authorisation, and software supply chain securityIdentify and mitigate emerging security risks, including those introduced by AI, and communicate potential impact to senior stakeholdersDevelop Product Security metrics to drive continuous security posture improvementsТребования:5+ Years of experience in Product Security, Application Security, or Security Engineering in a modern software environmentStrong experience in security architecture and threat modelling, with the ability to turn risk into practical engineering solutionsDeep technical knowledge of application and API security, secure development practices, modern software architectures, and cloud‑native systemsExperience embedding security controls into engineering workflows, software supply chains (SBOMs), and the software development lifecycleExcellent communication skills and the ability to build trust and influence engineers, architects, and senior technical leaders without direct authorityExperience with or a strong interest in AI security and using AI tools to advance security engineeringБудет плюсом:Hands‑on experience with Infrastructure as Code (IaC) security, scaling Security Champions programs, or managing Bug Bounty programs; relevant industry or cloud security certifications (e.g., CISSP, CSSLP, AWS Security Specialty)Условия:Amsterdam office

#J-18808-Ljbffr