Senior Product Security Engineer

The role is about:

We are looking for a Senior Product Security Engineer to build product security across our engineering organization. You will build the practice, not inherit it. Reporting to the Head of Information Security, you will embed security directly into the software development lifecycle — from architecture and design through build, deployment, and remediation. You will introduce security gates into engineering workflows, select and operate the right application security tooling, and use AI and automation to increase security coverage without slowing product delivery. 

• Location: Fully remote from Portugal or Poland
• Reporting to: Head of Information Security

What you will do:

• Design and introduce security gates into the development lifecycle, including embeded secure release practices and guardrails into the way software is built and deployed.
• Lead threat modelling for new products and major changes
• Provide secure-by-design input for new product builds across card issuing, embedded finance / banking-as-a-service, and other payment products
• Define secure-by-default architecture patterns for the application layer — authentication, authorization, API design, service-to-service trust — so the secure path is the easiest path for engineering teams
• Decide where traditional tooling is the right fit and where AI-assisted alternatives provide bette