Principal Engineer, commercetools
Product Security
+ Equity participation program
3-5 days a week in office
eCommerce provider
Be an early applicant
eCommerce provider
501-1000 employees
Be an early applicant
+ Equity participation program
3-5 days a week in office
501-1000 employees
Company mission
The leading composable commerce platform that arms you with the essential tools to evolve, build, and scale at your own pace
Role
Who you are
- A strong technical background and 5+ years of proven track record in hands-on Product Security
- 2+ years of experience improving Product Security in a leadership role
- Experience with customer-facing security roles and influencing roadmaps in matrix organizations
- Experience in a scale-up environment with ambitious and competing priorities
- Expertise in formulating, elaborating, and clarifying requirements or priorities
- Experience with Secure Architecture design reviews and Threat Modeling
- Experience infusing security into various levels of the SDLC
- Experience with Static Analysis and Secure Code Review implementations
- Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, API, and web application security
- Practical experience in DevSecOps and proficiency in at least one scripting language like JavaScript or Go
- Project management experience for projects affecting multiple teams
- Experience working within an Agile environment with a strong customer focus
- Experience setting up and running trainings or onboardings
- Clear written and verbal communication in fluent English
- AI Aptitude: A genuine curiosity for using AI tools to work smarter and more effectively, paired with a drive to learn and put them into practice in your role
- An eagerness to constantly improve and learn about leadership and new technologies
Desirable
- Nice to Have: * Security Certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certifications
What the job involves
- As our Principal Engineer Product Security , you’ll support the Engineering team by solving challenging technical problems for an ambitious product and enabling teams to "shift left" to build secure services on multi-cloud infrastructure
- Formulate, evangelise, and drive adoption of the product security strategy
- Assess, advise on, and increase the security maturity posture
- Create a standardised security architecture and operational best practices
- Help track and drive remediation of security and technology risks
- Educate product teams on risk assessments, threat modelling, and building secure api-first applications
- Review requirements and designs to help product teams address shortcomings
- Embed security tooling into the development process
- Contribute to the review of external penetration tests and help teams prioritise fixes
- Collaborate with product teams to improve overall security and resolve specific issues
- Facilitate or lead customer conversations regarding product security
- Triage and investigate new attack vectors to determine risk mitigation
- Drive security and quality initiatives across the organization and support certification audits
- Collaborate with Product Management, Principal Engineers, and legal/compliance teams
- Identify skills gaps and facilitate knowledge sharing across the organization
- You're a creative problem-solver who is wired to find solutions. You confidently dive into complex challenges and have a talent for making them simple for others.
- Your curiosity drives you to constantly grow and contribute to an environment of trust and teamwork. Great ideas come from many paths, and your unique perspective matters more than checking every box. What matters most is the mindset you bring to the work
Our take
eCommerce software simplifies complex processes and helps companies effectively manage their inventory, calculate taxes and perform other business-related functions. While companies like Shopify have addressed the needs of smaller retailers, commercetools has built its business around catering to enterprises' specific needs and large investment budgets.
The company provides APIs that can be used to build customised payment, check-out, social commerce, marketplace and other services. It powers billions of sales annually for its customers, which have included Audi, AT&T, Danone, Tiffany & Co., and John Lewis.
In 2021, commercetools acquired the frontend platform, Frontastic, to build a broader portfolio of commerce technology services. In 2023, commercetools scaled the availability of its tools in mainland China, marking the first cloud-native commerce solution to ever expand into the country, a significant expansion, seeing as the nation is the largest single eCommerce market worldwide. Though it now faces more competition in the form of Shopify and other growing competitors - as well as the threats of international tariffs, commercetools continues to innovate in the headless commerce space.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 4 rounds)
Sep 2021
$140m
SERIES C
Oct 2019
$153.5m
LATE VC
Total funding: $311.3m
Company benefits
- 100% covered premiums for medical, dental, and vision insurance for you, dependents, and spouse/partner
- Generous time off package including PTO, parental leave, company holidays, sick time, and volunteer time off
- Monthly health membership and phone stipend
- Compensation benefits including 401K company match and an annual professional development stipend
- Flexible, family-friendly working hours - we are a remote first company
Company HQ
Schwabing-West, Munich, Germany
Leadership
Dirk Hoerig
(Founder, Board Member & CIO)Previously co-founded and served as Managing Director for Xoanon. Sits in the Board of Directors as Executive Chairman for commercetools, Inc.
Denis Werner
(Managing Director)Previously acted as a Working Student for Management Consulting Group and as a Diploma Student for Oracle. Was one of the founders of Xoanon.
Share this job
View 17 more jobs at commercetools