Principal Engineer, commercetools
Product Security
eCommerce provider
Job no longer available
eCommerce provider
501-1000 employees
Job no longer available
501-1000 employees
Company mission
The leading composable commerce platform that arms you with the essential tools to evolve, build, and scale at your own pace
Role
Who you are
- A strong technical background and a proven track record in a hands-on Product Security role (5+ years)
- Experience improving Product Security in a leadership role (2+ years)
- Experience with Secure Architecture design reviews & Threat Modeling
- Experience infusing Security at various levels of SDLC
- Experience with Static Analysis & Secure Code Review Implementations for an efficient detection of security vulnerabilities early in the SDLC
- Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, API and web application security
- Security Certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certification
- Practical experience in DevSecOps, including proficiency in at least one scripting language (javascript , go ..)
- Ability to analyze security issues and related organizational issues
- Project management experience, especially for projects affecting multiple teams
- Experience working within an Agile environment with a strong customer focus
- Experience setting up trainings / onboardings and running them
- Clear written and verbal communication
- Fluent English to work in an international environment
- Great self-assessment mastery
- You are eager to share your knowledge and to constantly improve yourself and learn about leadership, new technologies and concepts
What the job involves
- As our Principal Engineer Product Security, you’ll work on challenging technical problems of an ambitious product. Our commerce APIs handle sensitive data like customer accounts and orders.
- The Merchant Center, our backoffice tool, has a sophisticated permission model built on top of our APIs. You’ll enable our product teams to “shift left” so they can build secure services on top of a multi-cloud infrastructure from the beginning
- Create a standardized security architecture and operational best practices, especially for new services and teams
- Educate our product teams how to perform risk assessments, model threats and design a secure application (including API-first products)
- Review requirements and application designs, and help product teams address any shortcomings
- Help product teams integrate SAST, DAST and SCA tooling into their development process
- Setup external penetration tests and enable teams to fix discovered vulnerabilities
- Collaborate with development teams to resolve security issues and improve security in general
- Investigate new attack vectors in a short period of time, to help teams implement appropriate security controls to mitigate risk
- Support teams during audits of our certifications
- Identify learning needs/skills gaps, and facilitate related security knowledge sharing across the organization with the help of our internal knowledge management team
- You will kickstart improvements affecting multiple teams to improve our Product Security, as well as bringing your colleagues’ ideas to live
- Lead communication within the organization on long running initiatives, and make sure they get adopted successfully
- Closely collaborate with Product Management, the other Principal Engineers, the Head of Engineerings as well as the legal and compliance teams
- You contribute to the evolution our tech vision and promote it within the organization
Our take
eCommerce software simplifies complex processes and helps companies effectively manage their inventory, calculate taxes and perform other business-related functions. While companies like Shopify have addressed the needs of smaller retailers, commercetools has built its business around catering to enterprises' specific needs and large investment budgets.
The company provides APIs that can be used to build customised payment, check-out, social commerce, marketplace and other services. It powers billions of sales annually for its customers, which have included Audi, AT&T, Danone, Tiffany & Co., and John Lewis.
In 2021, commercetools acquired the frontend platform, Frontastic, to build a broader portfolio of commerce technology services. In 2023, commercetools scaled the availability of its tools in mainland China, marking the first cloud-native commerce solution to ever expand into the country, a significant expansion, seeing as the nation is the largest single eCommerce market worldwide. Though it now faces more competition in the form of Shopify and other growing competitors - as well as the threats of international tariffs, commercetools continues to innovate in the headless commerce space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 4 rounds)
Sep 2021
$140m
SERIES C
Oct 2019
$149.9m
LATE VC
Total funding: $307.7m
Company benefits
- 100% covered premiums for medical, dental, and vision insurance for you, dependents, and spouse/partner
- Generous time off package including PTO, parental leave, company holidays, sick time, and volunteer time off
- Monthly health membership and phone stipend
- Compensation benefits including 401K company match and an annual professional development stipend
- Flexible, family-friendly working hours - we are a remote first company
Company HQ
Schwabing-West, Munich, Germany
Leadership
Dirk Hoerig
(Founder, Board Member & CIO)Previously co-founded and served as Managing Director for Xoanon. Sits in the Board of Directors as Executive Chairman for commercetools, Inc.
Denis Werner
(Managing Director)Previously acted as a Working Student for Management Consulting Group and as a Diploma Student for Oracle. Was one of the founders of Xoanon.
Share this job
View 14 more jobs at commercetools