Staff Product Security Engineer

About the role

Aiven is seeking a Staff Product Security Engineer to lead vulnerability management, security testing, and compliance efforts across its cloud data platform. The role works closely with Identity and Access Management, Security Operations, and engineering teams to ensure product and infrastructure security.

Key responsibilities

• Triaging and analyzing vulnerability scanner results, documenting false positives, and guiding risk‑based remediation.
• Conducting network vulnerability scans, prioritising fixes with system administrators, and escalating critical issues.
• Performing independent security testing of products using both automated tools and manual techniques, and reporting findings.
• Evaluating and tracking security issues reported by internal staff, customers, and third parties.
• Validating remediation efforts and conducting gap analyses where needed.
• Supporting compliance initiatives (PCI DSS, ISO 27001, SOC 2) by preparing reports and documenting scanner activities.
• Improving scanner coverage and configurations, and assisting with third‑party audits and penetration tests.
• Automating IAM procedures and assessing the security of AI algorithms used in Aiven’s products.

Required profile

• Bachelor's or master's degree in computer science, engineering, information security, or related field.
• 5+ years of experience in information security or a closely related discipline.
• Experience with software development, site reliability engineering, or IT architecture is a plus.
• Strong understanding of risk management and vulnerability management in multi‑cloud environments.
• Fluency in written and spoken English.

Required skills

• Vulnerability scanning and analysis.
• Network security scanning.
• Security testing tools and manual assessment techniques.
• Identity and Access Management (IAM) automation.
• Programming and software development.
• Cloud platforms (public hyperscalers).
• Risk management and compliance frameworks (PCI DSS, ISO 27001, SOC 2).

What we offer

• Equity plan participation.
• Hybrid work policy.
• Choice of equipment and professional development budget.
• Global employee assistance and wellbeing support.
• Global time‑off commitment and country‑specific benefits.