keenfinity
Product Security Engineer (m./f./div.)
- Compensation
- Not disclosed
- Location
- Ovar, Aveiro, pt
- Work setup
- Hybrid
- Seniority
- Middle
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Nice to have
- Penetration testing experience across devices, applications, and infrastructure.
- Experience with embedded/IoT devices, video management systems, or network appliances.
- Exposure to regulatory frameworks such as the EU Cyber Resilience Act (CRA).
- Familiarity with AI security, testing and assessing AI-powered products and features, and using
- of AI tools to enhance day-to-day security work.
- Cloud security certifications (e.g., AWS Certified Security – Specialty).
- Relevant certifications (e.g., OSCP, GIAC, CEH)
Full description
**Responsibilities
Security guidance & product lifecycle**
- Provide security guidance on new products and technologies across the organization.
- Act as the security lead on development projects, embedding security throughout the product
- development lifecycle.
- Support development teams with DevSecOps practices, integrating security into CI/CD pipelines
- and fostering a shift-left security culture.
- Guide project teams through secure product lifecycle management, and provide ongoing
- security support to the product engineering team.
Threat modeling & security assessments
- Collaborate with engineering teams to perform regular product security assessments.
- Lead threat modeling exercises to identify and prioritize risks early in design.
Application security (AppSec)
- Perform application security assessments and secure code reviews across web, backend, and
- native codebases.
- Operate application security tooling (SAST, DAST, SCA), configuring scans, and triaging and
- prioritizing findings.
- Advise development teams on secure coding practices and remediation of application-layer
- vulnerabilities.
Vulnerability testing
- Conduct regular vulnerability testing and scanning across current and legacy devices, products,
- and supporting infrastructure.
- Triage, prioritize, and track identified vulnerabilities through to remediation.
Security tooling & automation
- Manage the operations and effectiveness of the product security pipeline tooling.
- Tune and update tooling to reduce false positives and improve signal quality.
- Design and implement tools and automation to scale security processes.
Cloud security
- Assess and help secure cloud environments (AWS), reviewing configurations, IAM policies, and
- infrastructure against security best practices.
- Support secure deployment of cloud-hosted products and services, and help embed security into
- infrastructure-as-code and cloud CI/CD workflows.
Incident detection & response
- Respond to vulnerabilities surfaced through threat detection systems.
- Support the incident detection and response processes.
PKI & cryptography
- VMS Team Ovr – Product Security Engineer (mid-level) - Job Description
- Operate and support internal and public PKI, certificate issuance, lifecycle management, and
- related cryptographic services.