Senior Product Security Engineer

n8n • Spain

Remote Visa Sponsorship

Apply Now

AI Summary

Establish n8n's product security posture as the first dedicated security hire, owning vulnerability management, disclosure, and incident response. Integrate security tooling into the SDLC and partner with engineering to build a secure, scalable open-source SaaS platform. Requires 5+ years of experience in product security, vulnerability management, and security tooling implementation.

Key Highlights

First dedicated security hire with significant autonomy to define security strategy and processes.

Own vulnerability intake, triage, and coordinated disclosure, including managing bug bounty programs.

Integrate security tooling (SAST, DAST, scanning) into CI/CD and lead incident response.

Key Responsibilities

Own and operate n8n's vulnerability intake and triage process, including the security inbox.

Design, improve, and run a robust Vulnerability Disclosure Program (VDP) with clear SLAs.

Coordinate private fixes for high-severity issues and manage coordinated disclosure timelines.

Create and manage GitHub Security Advisories (GHSA).

Coordinate bug bounty payouts and researcher communication for validated findings.

Define and operate patch and release processes for security fixes.

Evaluate, implement, and maintain security tooling across the SDLC (SAST, DAST, dependency scanning, container scanning, SBOMs).

Own configuration, tuning, and triage workflows for existing tools.

Plan and manage third-party penetration tests, including scoping, vendor coordination, and remediation tracking.

Conduct internal security assessments and lightweight red-team or tabletop exercises.

Lead coordination of security incidents from detection through resolution.

Drive incident tracking and remediation workflows in Linear.

Author security advisories and contribute to internal and external post-incident reviews.

Communicate clearly, calmly, and empathetically with customers and users during security incidents.

Define and maintain security policies, standards, and public-facing disclosure documentation.

Manage relationships with security researchers and bug bounty platforms.

Track industry trends, emerging vulnerabilities, and relevant research.

Help shape longer-term security strategy and roadmap in collaboration with engineering leadership.

Embed security into the software development lifecycle through threat modeling, design reviews, and pragmatic guardrails.

Advise engineering teams on secure coding practices and common vulnerability patterns.

Produce clear, actionable security documentation for internal engineering audiences.

Partner closely with product and engineering teams to ensure security considerations are built in early.

Searching for Cyber Security roles that provide visa sponsorship? Connect with international employers through Cyber Security Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

Technical Skills Required

Vulnerability Management Security Tooling Incident Response

Benefits & Perks

Competitive compensation

Equity ownership

30 days vacation (Europe) or 15 vacation days + 8 sick days (US)

Health and wellness benefits

Pension contributions (Europe) or 401(k) match (US)

€1K annual learning budget

$100 monthly open source contribution

Unlimited AI budget

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

Nice to Have

Experience securing SaaS platforms in cloud-native environments

Familiarity with JavaScript/TypeScript and the Node.js ecosystem

Experience working in high-growth or open-source-adjacent companies

Knowledge of DevSecOps practices and CI/CD security integration

Experience with threat modeling methodologies

Relevant security certifications (e.g., OSCP, CISSP, CEH)

Job Description

The AI orchestration of your wildest imagination.n8n is the open workflow orchestration platform built for the new era of AI.We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits.Backed by a fiercely inventive community and 500+ builder?approved integrations, we're changing the way people bring systems together and scale ideas for impact.Since our founding in ****, we've grown into a diverse team of over 160, working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.