Product Security Engineer, Scalable Capital
Digital investment platform
Posted today
Digital investment platform
1001+ employees
Posted today
1001+ employees
Company mission
Scalable Capital's mission is to provide people with professional, intelligent, and at the same time cost-effective solutions for wealth creation, trading and investing.
Role
Who you are
- Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent practical experience)
- Profound experience in Application Security, Product Security, or Software Engineering with a security focus. We are looking for potential and foundational skills over a perfect checklist
- Strong understanding of the OWASP Top 10 and familiarity with verification standards like OWASP ASVS/MASVS. You know what "good" looks like and how to verify it
- You can read and review code. Familiarity with Kotlin, Java, Python, or TypeScript is highly desired. You should be comfortable discussing code logic with developers
- Experience with Burp Suite or similar testing tools. Familiarity with CI/CD concepts (GitHub Actions) is a plus
- Certifications are nice to have but not required. Examples include OSCP, GWAPT, GCPN, CSSLP, or AWS Security Specialty
- You have high empathy for developers. You can explain technical findings clearly and enjoy working in a collaborative environment
- You believe security is a team sport. You prefer collaboration over confrontation and have a strong teamwork orientation
What the job involves
- We’re looking for a Product Security Engineer to join our team and help champion the security of our platform. We don't expect you to be a "unicorn" who knows everything on day one; instead, we are looking for someone with a strong foundation in application security who is eager to learn and grow
- In this role, you will act as a bridge between security and engineering. You will start by focusing on hands-on security testing and code review, and with the support of senior team members, you will gradually expand your scope to include architecture reviews, automated tooling, and strategic security initiatives
- Application Security Testing: Perform security assessments and code reviews on our web apps, mobile apps, and APIs. You will combine manual testing with automated tooling to validate security controls against industry standards
- Vulnerability Disclosure & Management: Triage incoming reports from bug bounties, vulnerability disclosures, and external penetration tests. You will help manage the intake process and work towards establishing a formal Bug Bounty program in the future
- Secure Software Development Lifecycle (SSDLC): Assist in integrating security tooling (SAST, DAST, SCA) into our CI/CD pipelines (AWS/GitHub). You will help tune these tools to ensure high-fidelity alerts for our developers
- Threat Modeling Support: Partner with senior security engineers and product teams to participate in threat modeling sessions. You will learn to identify architectural flaws and logic vulnerabilities in the design phase
- Developer Enablement: Collaborate with engineering teams to advocate for secure coding practices. You will help build "paved roads"—secure defaults and libraries—that make it easier for developers to write secure code in Kotlin and Python
- Cloud Security Basics: Gain exposure to securing infrastructure-as-code and AWS environments, helping ensure our microservices architecture remains resilient
Our take
Interest around investing in digital assets is increasing steadily due to innovations in fintech smartphone applications and the popularity of blockchain finance such as cryptocurrency. While stocks and cryptocurrency have a lot to do with this increase in popularity, it has also led to new investors learning about ETFs and index funds, meaning more people are looking for easier ways to invest.
Scalable Capital provides a free smartphone application for the investing and trading of stocks, cryptocurrencies, commission-free ETFs, and index funds, with subscription fees providing commission-free stock trading. The application also features a machine learning-driven robotrading service called Smart Predict to aid in improving users' limit and stop orders.
Whilst several other European investment platforms focus on commission-free trading, Scalable Capital has taken a fresh perspective by focusing on providing commission-free ETF investment. By doing this, the company encourages smart long-term ETF investments over riskier day-trading, tapping into a more mature market than applications focused on stocks. With substantial growth reported in 2025, Scalable Capital is carving out its market share.
Kirsty
Company Specialist at Welcome to the Jungle
Insights
1% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Jun 2025
$175m
LATE VC
Dec 2023
$64.7m
SERIES E
Total funding: $554.4m
Company benefits
- Remote working opportunities - collaborate with your team no matter where you are in Germany: the majority of our jobs can be done working from home. So if you aren't near one of our physical locations in Germany, check out if your job is eligible remotely
- Join an international and diverse, inclusive community - be part of a network of highly talented, diverse and motivated people, from more than 30 nationalities. We enjoy regular office parties & after work drinks, BBQs in the summer, weekly runs and much more
- Lounge around - take a break to relax on our terrace in Munich or in the Beergarden downstairs in Berlin. Enjoy fresh fruits, soft drinks, and tea daily, and if want, develop your Barista skills with our Espresso machine
- Gear and perks - work with the latest hardware (including a MacBook Pro or equivalent and your choice of headphones). We also support your workplace with the equipment that you need, either in the offices or at home
- Learn and grow - develop yourself further with a personal education budget and in-house knowledge sharing sessions with catered lunch. If you want to learn or improve your German language skills, you will like the free classes right in the office or our support for online classes
- Have an impact - ship features to thousands of users and work with leading financial institutions across Europe on a regular basis. Transform with us the traditional finance industry with the aim of democratizing investment management and brokerage
Company HQ
Altstadt-Lehel, Munich, BY
Leadership
Erik Podzuweit
(Co-Founder & Co-CEO)Experience as a Financial Analyst and Executive Director/VP for Goldman Sachs. Former Co-CEO (Germany) at Westwing Home & Living.
Florian Prucker
(Co-Founder & Co-CEO)Vice President of Goldman Sachs from 2008 to 2014.
Patrick Pöschl
(Co-Founder)Experience as Asset Structurer for Goldman Sachs from 2009 to 2014. Co-founded Scalable Capital in 2014.
Simon Miller
(Co-Founder & Head of Broker International)Experienced as Base Metals Derivatives Trader for Barclays from 2008 to 2015. Co-founded Scalable Capital in 2014 as Business Developer.
Stefan Mittnik
(Co-Founder)Experience as Professor at Ludwig-Maximilians-University Munich from 2003. Co-founded Scalable Capital in 2014.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 16 more jobs at Scalable Capital