Product Security Engineer (f/m/d)

About us ATOSS Software SE is one of Germany’s most successful tech growth stories. As the market leader in Workforce Management Software, we help companies work more intelligently, creatively, and humanely optimizing the balance between profitability and people. We’re a rare company: according to Handelsblatt (10/24), just 309 public companies worldwide achieved over 20% return on sales for ten consecutive years. Only two are based in Germany and ATOSS is one of them. With 19 years of record breaking growth, over €2 billion market cap, and listings in SDAX and TecDAX, we’re scaling globally and we’re growing. If you’re ready to drive impact in a high-performing B2B SaaS environment, this is your chance to elevate your career. The Person You are At ATOSS, we hire for both character and skill, seeking individuals who embody resilience, a pioneering spirit, and the passion to grow. We value those who: Think like entrepreneurs – taking ownership, pushing boundaries, and driving impact. Challenge the status quo – bringing fresh ideas and bold execution to the table. Thrive in change – seeing growth as a lifelong journey, both professionally and personally. The Role We are looking for a Product Security Engineer who will take ownership of core product security activities and play a key role in strengthening the security of our products. In this role, you will collaborate closely with the lead architect, senior product security leadership, and cross‑functional teams to ensure security is a default consideration at the architectural design level, implement robust security controls, drive security testing, and improve our secure development practices . Key Responsibilities Drive key elements of the Secure SDLC , including hands‑on threat modeling, code and architecture assessments, and vulnerability triage and remediation support. Independently operate security testing workflows , such as SAST, DAST, SCA, secrets scanning, dependency checks, and manual verification of findings. Contribute to the design and continuous improvement of DevSecOps tooling and automatio n, ensuring security becomes a natural part of development pipelines. Monitor product ‑ relevant threat intelligence , analyze impact, and proactively recommend security improvements. Support compliance efforts (Cyber Resilience Act, GDPR, ISO 27001, SOC 2) by implementing controls, maintaining documentation , and ensuring evidence (e.g., SBOM, security test reports) remains audit‑ready. Participate in security incident investigations for product‑related issues, including root‑cause analysis, documentation, and follow‑up actions. Act as a trusted internal advisor to Engineering and Product teams, helping translate security requirements into practical, developer‑friendly measures. Use insights from testing, incidents, metrics, and threat data to propose concrete security improvements across the product lifecycle. Key Requirements A degree in computer science, information security, or a related field. 3+ years of relevant work expe rience in application security, product security, secure software development, or DevSecOps. Good understanding of cloud architectures, security testing techniques, secure coding, and common security tooling. Experience contributing to security frameworks, processes, and automation in a software engineering environment. Familiarity with regulatory and certification requirements and willingness to grow deeper in this area. Strong communication and collaboration skills; able to work independently with engineering teams and provide clear, actionable security guidance. Ownership mindset, curiosity, and a drive to continuously improve product security. Our Benefits Competitive Rewards: Including profit-sharing and employee stock program. Structured Onboarding & Continuous Leadership Development: Clear career paths onboarding through Expert & Leadership Tracks, plus access to ATOSS Academy. Flexible Work Culture: Hybrid options (remote within the EU), 30 days of vacation, and a strong commitment to diversity & inclusion. Engaging Team Environment: Seasonal company events, team retreats, and an in-house barista. Health & Wellbeing: Including regular check-ups, corporate wellness programs, and Wellhub membership. Stability & Growth: Company listed on SDAX & TecDAX, with 19+ years of record-breaking revenue and a 30%+ EBIT margin. Certified Top Employer© for the 5th year in a row. At Atoss, great talent knows no limits. We welcome professionals from all backgrounds and empower their growth through an inclusive, skill focused environment. Join us and be part of a high-growth, future-focused company!