Sr Product Security Engineer | Remote | Europe

The AI orchestration of your wildest imagination. n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact. Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve: - Cultivated a community of more than 650,000 active developers and builders - Earned 190K+ GitHub stars, making us one of the world’s Top 40 most popular projects - Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation That’s the company we’ve built. Now we’d love to see what you can build. If you’re applying, try n8n out - whether you’re technical or not - and share a screenshot of your first workflow with us. The easiest place to start is here: app.n8n.cloud/register http://app.n8n.cloud/register. We’re in a defining moment of an incredible journey. Come and build with us. 🎯 Your main goal will be to strengthen n8n’s product and platform security by driving hands-on security work that helps engineering teams reduce risk, ship securely, and build a growing security practice from an early stage. To do so, you’ll partner closely with the Head of Security in a 50+ person engineering department to run key security workflows, improve security across the SDLC, and help lay the foundations of a small but growing security team: VULNERABILITY MANAGEMENT AND DISCLOSURE - Own day-to-day vulnerability intake and triage workflows, including the security inbox and bug bounty submissions. - Coordinate remediation with engineering teams and help track issues through to resolution with clear priorities and follow-through. - Support coordinated disclosures, GitHub Security Advisories, and researcher communication in a timely and structured way. SECURITY TOOLING AND TECHNICAL ASSESSMENTS - Operate and improve security tooling across the SDLC, including scanning, alert triage, and workflow tuning. - Run practical security assessments such as targeted reviews, validation of findings, and remediation tracking from internal or external testing. - Help improve visibility into product and platform risk through actionable findings, documentation, and technical recommendations. SECURE PRODUCT DEVELOPMENT SUPPORT - Partner with engineers to embed security into design, development, and release processes in pragmatic ways. - Support threat modeling, secure coding guidance, and lightweight security reviews across product and platform areas. - Create clear, useful documentation that helps teams understand risks and apply secure development practices. SECURITY OPERATIONS AND TEAM FOUNDATIONS - Support the coordination of security incidents by helping with investigation, tracking, communication, and follow-up actions. - Contribute to playbooks, runbooks, and internal processes that improve security readiness over time. - Help shape how the security function works in practice as the team grows, together with the Head of Security and future hires. REQUIREMENTS MUST-HAVES - 🛡️ Product security experience: You have 5+ years of experience in product security, application security, or a closely related security engineering role in a SaaS or cloud environment. - 🔍 Vulnerability management skills: You have hands-on experience triaging, validating, and coordinating remediation for security findings. - 🌐 Web application security knowledge: You have a strong understanding of common web vulnerabilities and secure development principles. - 🧰 Security tooling experience: You’ve worked with security tooling such as SAST, DAST, dependency scanning, container scanning, or si...