Senior Product Security Engineer
#### **关于员工基础** 我们激励人们共同取得伟大成就。我们的使命是帮助组织利用第一款 AI 原生雇员体验平台来释放灵感通讯的力量。我们行业领先和获奖的代理人工智能通信道** - 内部网络，员工应用程序和电子邮件解决方案 - 创造了让员工联系并赋予权力的吸引人的经历。总部位于德国 Chemnitz 和纽约市，设在柏林，伦敦，悉尼，东京，布拉格和明尼阿波利斯圣保罗，我们的多元 550+名员工团队支持1500+客户到超过1400万员工转型员工体验。我们自豪成为一个以超过10亿美元的私人价值为证实的"Unicorn"公司，这表明了我们行业的强大增长，创新和持久影响。一起，我们正在塑造工作场所通信的未来。在 Staffbase,安全是我们建立的一切核心。我们的产品安全团队帮助保持我们的产品和客户数据安全，同时使整个公司的工程团队能够获得安全性。我们相信当人们带来他们的真实自我和多元化的观点时，最好的安全工作会发生，我们也很自豪于团队中独特的才华和背景混合。作为一个启动团队，我们提供工具，指导和见解，使开发人员能够在开发过程中早期整合安全。我们认为安全不是一个阻碍者，而是作为一种可信赖的合作伙伴，是更好的产品的基础。与我们一起，你将获得现代安全实践的实践经验，经验丰富的工程师的辅导以及在全球 SaaS 环境中有明显影响力的机会。我们以好奇心，谦逊和增长思维共同努力，相互支持，掌握我们的贡献，并庆祝进展。在这里，你的想法很重要，你的工作将塑造我们如何构建安全产品，并且你将有空间发展成新的挑战。**你将要做什么** - 掌握改善我们的安全自动化和加强产品安全管道的任务 - 主动探索 AI 用于发现和修复漏洞的使用 - 持续学习和分享有关我们特定产品环境中的漏洞应用知识 - 用软件工程解决方案增强我们的服务支持团队 - 与整个产品部门的利益相关者密切合作，获得广泛的信息
查看英文原文
#### **About Staffbase**
We inspire people to achieve great things together. Our mission is to help organizations unlock the power of inspirational communication with the first **AI-native Employee Experience Platform**. Our **industry-leading and award-winning agentic AI communications channels** - intranet, employee app and email solutions - create engaging experiences that connect and empower employees.
Headquartered in Chemnitz, Germany and New York City, with offices in Berlin, London, Sydney, Tokyo, Prague, and Minneapolis–St. Paul, our diverse team of 550+ employees supports 1,500+ customers—reaching over 14 million employees—in transforming their employee experience.
We are proud to be a **Unicorn** company—privately valued at over $1 billion—demonstrating strong growth, innovation, and lasting impact in our industry. Together, we’re shaping the future of workplace communication.
At Staffbase, security is at the heart of everything we build. Our Product Security team helps keep our products and customer data secure while enabling engineering teams across the company. We believe the best security work happens when people bring their authentic selves and diverse perspectives to the table and we’re proud of the unique mix of talents and backgrounds in our team.
As an enablement team, we provide tools, guidance, and insights that allow developers to integrate security early in the development process. We see security not as a blocker but as a trusted partner that is the foundation for better products. With us, you’ll get hands-on experience with modern security practices, mentorship from experienced engineers, and the chance to make a visible impact in a global SaaS environment.
We work together with curiosity, humility, and a growth mindset, supporting each other, taking ownership of our contributions, and celebrating progress along the way. Here, your ideas matter, your work will shape how we build secure products, and you’ll have space to grow into new challenges.
**What you’ll be doing**
- Take ownership of tasks that improve our security automation and strengthen our product security pipelines
- Proactively explore the use of AI for vulnerability detection and remediation
- Continuously learn and share knowledge about how vulnerabilities apply in our specific product context
- Support the team by enhancing our services with software engineering solutions
- Collaborate closely with stakeholders across the product department and gain broad exposure to how a growing SaaS company operates
- Maintain our outbound e-mail security by regularly reviewing the related metrics
- Maintain our Web Application Firewall ruleset
- Kubernetes security
- CI/CD pipelines security
- Maintain our central HTML sanitization service written in TypeScript
**What you need to be successful**
- Practical knowledge of security topics (e.g. penetration testing, secure software development, vulnerability management, SAST, DAST)
- Strong programming skills, preferably one of the following: TypeScript, JavaScript, Kotlin, Java, Go, or Python
- Practical knowledge of Unix and Kubernetes infrastructure, preferably managed via Terraform and Kustomize
- Strong communication skills in English (German is a plus)
**What you'll get**
- _Competitive Compensation_ - we offer attractive salary packages including LTIP (unit-based Long Term Incentive Plan)
- _Flexibility_- we offer flexible working time models and the option of hybrid work, and support this with a yearly flex work allowance of €1560
- _Recharge_ - with 31 vacation days annually (incl. one floating holiday), plus pro rata fully paid Fridays off during August
- _Support_-we’re offering a company pension scheme
- _Volunteers Day_- you’ll get one day off per year for supporting a social project