Senior Product Security Engineer

<p><span>We are seeking a </span><b>Senior Product Security Engineer</b><span> to drive the product security strategy and empower our engineering teams to design and build secure software across our diverse product portfolio. This role involves leading the integration of advanced security practices into cutting-edge technologies—such as </span><b>Generative AI (GenAI)<span>, </span>Large Language Models (LLM)<span>, and </span>data governance systems</b><span>—while also ensuring the security of our </span><b>microservice architecture</b><span> and </span><b>mobile application</b><span>. You will be </span><b>independently</b> <b>responsible</b><span> for delivering robust security for every feature and service we provide to our customers.</span></p><p></p><p><span>The </span><b>Product Security</b><span> team is part of N26’s </span><b>Security Engineering Segment</b><span>. In this role, you will serve as a </span><b>key mentor</b><span><b> </b>and </span><b>contributor</b><span>, actively promoting N26’s security standards by integrating security practices throughout the product lifecycle. You will provide guidance and support to other engineers, sharing your expertise and helping to elevate the overall security posture of our products.</span></p><p></p><p><span>As we embrace emerging technologies like GenAI and LLMs, this role will </span><b>independently</b><span> lead efforts to safeguard sensitive data, align with data governance principles, and address risks unique to AI-driven products. You will also ensure our broader product ecosystem remains secure, scalable, and resilient. Additionally, you will </span><b>proactively</b><span> drive the enhancement of our </span><b>Product Security Program</b><span>, providing strategic guidance to engineering teams to anticipate and counter evolving threats.</span></p><h3>In this role, you will:</h3><ul><li><p><b>Independently apply advanced knowledge of security architecture</b><span> to guide software engineers in building secure products and services across a diverse technology stack, including microservices, mobile applications, and cutting-edge AI-driven solutions.</span></p></li><li><p><b>Serve as a technical leader and mentor</b><span>, collaborating closely with engineering teams to understand and address their complex application security needs, including those related to emerging technologies like Generative AI (GenAI) and Large Language Models (LLM).</span></p></li><li><p><b><span>Perform </span>application security design reviews<span>, </span>threat modeling<span>, and </span>code reviews</b><span>, ensuring security principles are embedded in every stage of the development lifecycle.</span></p></li><li><p><span>Utilize </span><b>expert penetration testing skills</b><span> to assess and strengthen the security of internal and external applications and services, including AI-powered features and traditional systems.</span></p></li><li><p><b>Independently develop advanced tooling</b><span> to support the Secure Software Development Lifecycle (SSDLC) and other security initiatives across diverse product environments.</span></p></li><li><p><span>Build </span><b>automation frameworks</b><span> to enable engineering teams to deliver secure features efficiently, whether for AI solutions or traditional applications.</span></p></li><li><p><b>Mentor and educate engineering teams</b><span> and security champions on secure coding and development practices, including security considerations unique to AI and data governance.</span></p></li><li><p><b>Empower<span> engineering teams to </span>independently identify and remediate vulnerabilities</b><span> before they reach production, with a focus on both general application security and AI-specific risks.</span></p></li><li><p><b>Lead reactive incident response</b><span> if a security event occurs.</span></p></li><li><p><span>Conduct </span><b>proactive and in-depth research</b><span> to detect new attack vectors, including those targeting AI technologies, data pipelines, and LLM-based systems.</span></p></li></ul><h2>What you need to be successful: </h2><p>Background and Skills:</p><ul><li><p><b><span>Expertise in </span>software engineering</b><span> with one or more general-purpose programming languages (e.g., </span>Python<span>, </span>Go<span>, or similar).</span></p></li><li><p><span>Extensive </span>experience with <b>threat modeling</b><span>, security testing, and analyzing applications, including those involving emerging technologies like </span><b>Generative AI (GenAI)<span> and </span>Large Language Models (LLM)</b><span>.</span></p></li><li><p><span>Prior experience in </span><b>building automation</b><span> to support the </span>Secure Software Development Lifecycle (SSDLC)<span>.</span></p></li><li><p><span>Proven ability to </span><b>lead and mentor</b><span><b> engineering teams</b>, supporting them throughout the Software Development Lifecycle (SDLC).</span></p></li><li><p><span>A </span><b>pas