# Staff Product Security Engineer [Aiven36](https://gurify.com/jobs?q=Aiven36) · Helsinki, Finland · Posted 2 months ago Principal [Security](https://gurify.com/jobs/security) [Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/aiven36/jobs/4900414101) ## Job description We’re a global team of over 400 people, working together to push the boundaries of open-source technology and multi-cloud solutions. Our vision is to help developers, builders, and creators bring their ideas to life with speed and simplicity, by providing a cloud data platform that makes open-source databases, search, streaming, and application infrastructure easily accessible to everyone. ### The Role: We are looking for a Staff Product Security Engineer to join our Product Security team. The role of Aiven’s product security is to identify, report, and assist with the remediation of security vulnerabilities, to manage our bug bounty program, and to provide technical security insights into new products that the Aiven engineering organization is developing. The Staff Product Security Engineer will also work closely with the Identity and Access Management team and Security Operations to ensure the security of our products and infrastructure. ### What You'll Do: - Vulnerability Management: Triaging and analyzing results from our vulnerability scanners. This includes identifying and documenting false positives to minimize unnecessary remediation efforts. You will work with documentation and other team members to identify risk-based decisions and write responses to audit questions. - Network Security Scanning: Participate in the regular review of internal network vulnerability scans. Collaborate with network and system administrators to prioritize and remediate identified vulnerabilities, escalating critical issues as needed. - Security Assessment: Independently conduct security testing of our products using a variety of methodologies, including tool-based assessment and manual testing. Report and document findings for internal users. Apply and state industry-standard methodologies for testing to meet audit requirements. - Issue triage: You will evaluate issues reported by internal staff, customers, and third parties as to reproducibility, and track information on true positive security vulnerabilities. - Remediation validation: You will determine whether engineering changes have fixed security vulnerabilities, and conduct a gap analysis where required. - Compliance Support: Contribute to compliance efforts (e.g., PCI DSS, ISO 27001, SOC 2) by assisting in the preparation of reports and documentation related to vulnerability scanning activities. This may involve documenting false positives, validating compensating controls, and ensuring accurate reporting. - Scanner Optimization: Contribute to the ongoing improvement of our vulnerability scanning program by identifying and reporting any gaps in scanner coverage. This includes verifying that all intended systems and applications are being scanned and suggesting improvements to scanning configurations. - Audit: Assist in execution of 3rd-party audits and penetration tests - IAM Automation: Assist with the automation of identity and access management procedures and reporting - AI Security: Assess the security of artificial intelligence algorithms in Aiven’s products ### What We're Looking For: We are looking for talented self-starters who want to learn about security and grow into roles such as Software Engineer in Security and Information Security Analyst. We will consider candidates with less security-specific experience but with the desire to learn! ### Examples of attributes for success in this role include: - A bachelor's or master’s degree in computer science, engineering, information security, information technology, or equivalent training - 5+ years of experience in information security or a related field - Experience in software development, site reliability engineering, software or IT architecture, business analysis, risk management, and project management are assets - Detailed knowledge of security, distributed systems, and microservices architecture - Senior certifications in hyperscaler clouds and in security testing; certifications in risk management are beneficial - Detailed understanding of risk management and vulnerability management practices, specifically in a multi-cloud environment - Relevant experience from modern technologies such as public cloud and networking - Experience with programming and software development - Fluency in English, verbal and written ### Amazing! What’s next: If you think Aiven is the place for you and that our Values align with yours, send us your resume and we’ll get in touch! ### Global Benefits: Our global benefits are designed to help you thrive and grow, personally and professionally: - Participate in Aiven’s equity plan. - Balance work and life with our hybrid work policy. - Choose the equipment you need to set yourself up for success. - Use your Professional Development Plan budget for learning opportunities. - Receive holistic wellbeing support through our global Employee Assistance Program. - Inquire about our Global Time Off Commitment (Parental and Sick Leave, as well as Personal Time) - Enjoy country-specific benefits for our global cast. ### How to Recognize and Avoid Employment Scams: There has been a rise in fake job postings used by scammers to get personal information. At Aiven, all of our emails relating to recruitment come from an @aiven.io, @greenhouse.io or @eu.greenhouse.io domain and all of our interviews are conducted by video call or in person. Our interviews will never occur via text or chat. If you’re unsure of the legitimacy of a job opportunity/offer pertaining to Aiven, please don’t hesitate to reach out to us at recruitment@aiven.io. ### Equal Opportunities: Aiven provides equal employment opportunities to all qualified employees and applicants for employment without regard to age, gender identity, national or ethnic origin, religion, sexual orientation, physical and mental ability, marital and family status or without regard to any other similar personal attributes. Aiven complies with applicable local laws governing non-discrimination in employment in every location in which the company operates. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfer, leaves of absence, compensation, training and any other terms and conditions related to employment. At Aiven we are committed to providing reasonable accommodations for qualified individuals with disabilities or special needs in our working environment and job application procedures. We make all reasonable accommodations for persons with disabilities or who otherwise need support to thrive in the workplace. We are committed to continuously improving workplace accessibility. There is an option to request a discussion in the application process but if you have any questions before applying please write to us at recruitment@aiven.io. **Live in Aiven36’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role. We remove it as soon as it disappears at source. ## More jobs like this - CH [Senior Product Security Engineer](https://gurify.com/job/senior-product-security-engineer-at-chaosindustries-7bf2e814039b) Chaosindustries · El Segundo, United States · 5 days ago - CH [Product Security Engineer](https://gurify.com/job/product-security-engineer-at-chaosindustries-b3ad93988901) Chaosindustries · El Segundo, United States · 5 days ago - DA [Staff Product Security Engineer](https://gurify.com/job/staff-product-security-engineer-at-dashlane-1a9c0603a7d1) Dashlane · Lisbon, Portugal · last week - TR [Senior Product Security Engineer](https://gurify.com/job/senior-product-security-engineer-at-trainline-40f1783e34dd) Trainline · London · 3 weeks ago - TR [Senior Product Security Engineer](https://gurify.com/job/senior-product-security-engineer-at-trainline-42b04a9a2a16) Trainline · London · 2 weeks ago - TI [Principal Product Security Engineer](https://gurify.com/job/principal-product-security-engineer-at-tide-69c959bb6a7d) Tide · United Kingdom · 2 weeks ago ```json {"@context":"https://schema.org/","@type":"JobPosting","title":"Staff Product Security Engineer","description":"\u003Cp\u003EWe\u2019re a global team of over 400 people, working together to push the boundaries of open-source technology and multi-cloud solutions. Our vision is to help developers, builders, and creators bring their ideas to life with speed and simplicity, by providing a cloud data platform that makes open-source databases, search, streaming, and application infrastructure easily accessible to everyone.\u003C/p\u003E\u003Ch3\u003EThe Role:\u003C/h3\u003E\u003Cp\u003EWe are looking for a Staff Product Security Engineer to join our Product Security team. The role of Aiven\u2019s product security is to identify, report, and assist with the remediation of security vulnerabilities, to manage our bug bounty program, and to provide technical security insights into new products that the Aiven engineering organization is developing. The Staff Product Security Engineer will also work closely with the Identity and Access Management team and Security Operations to ensure the security of our products and infrastructure.\u003C/p\u003E\u003Ch3\u003EWhat You\u0026#39;ll Do:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EVulnerability Management: Triaging and analyzing results from our vulnerability scanners. This includes identifying and documenting false positives to minimize unnecessary remediation efforts. You will work with documentation and other team members to identify risk-based decisions and write responses to audit questions.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ENetwork Security Scanning: Participate in the regular review of internal network vulnerability scans. Collaborate with network and system administrators to prioritize and remediate identified vulnerabilities, escalating critical issues as needed.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESecurity Assessment: Independently conduct security testing of our products using a variety of methodologies, including tool-based assessment and manual testing. Report and document findings for internal users. Apply and state industry-standard methodologies for testing to meet audit requirements.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EIssue triage: You will evaluate issues reported by internal staff, customers, and third parties as to reproducibility, and track information on true positive security vulnerabilities.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERemediation validation: You will determine whether engineering changes have fixed security vulnerabilities, and conduct a gap analysis where required.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECompliance Support: Contribute to compliance efforts (e.g., PCI DSS, ISO 27001, SOC 2) by assisting in the preparation of reports and documentation related to vulnerability scanning activities. This may involve documenting false positives, validating compensating controls, and ensuring accurate reporting.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EScanner Optimization: Contribute to the ongoing improvement of our vulnerability scanning program by identifying and reporting any gaps in scanner coverage. This includes verifying that all intended systems and applications are being scanned and suggesting improvements to scanning configurations.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAudit: Assist in execution of 3rd-party audits and penetration tests\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EIAM Automation: Assist with the automation of identity and access management procedures and reporting\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAI Security: Assess the security of artificial intelligence algorithms in Aiven\u2019s products\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat We\u0026#39;re Looking For:\u003C/h3\u003E\u003Cp\u003EWe are looking for talented self-starters who want to learn about security and grow into roles such as Software Engineer in Security and Information Security Analyst. We will consider candidates with less security-specific experience but with the desire to learn!\u003C/p\u003E\u003Ch3\u003EExamples of attributes for success in this role include:\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EA bachelor\u0026#39;s or master\u2019s degree in computer science, engineering, information security, information technology, or equivalent training\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E5\u002B years of experience in information security or a related field\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience in software development, site reliability engineering, software or IT architecture, business analysis, risk management, and project management are assets\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDetailed knowledge of security, distributed systems, and microservices architecture\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESenior certifications in hyperscaler clouds and in security testing; certifications in risk management are beneficial\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDetailed understanding of risk management and vulnerability management practices, specifically in a multi-cloud environment\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERelevant experience from modern technologies such as public cloud and networking\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with programming and software development\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFluency in English, verbal and written\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EAmazing! What\u2019s next:\u003C/h3\u003E\u003Cp\u003EIf you think Aiven is the place for you and that our Values align with yours, send us your resume and we\u2019ll get in touch!\u003C/p\u003E\u003Ch3\u003EGlobal Benefits:\u003C/h3\u003E\u003Cp\u003EOur global benefits are designed to help you thrive and grow, personally and professionally:\u003C/p\u003E\u003Cul\u003E\u003Cli\u003EParticipate in Aiven\u2019s equity plan.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBalance work and life with our hybrid work policy.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EChoose the equipment you need to set yourself up for success.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EUse your Professional Development Plan budget for learning opportunities.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EReceive holistic wellbeing support through our global Employee Assistance Program.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInquire about our Global Time Off Commitment (Parental and Sick Leave, as well as Personal Time)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEnjoy country-specific benefits for our global cast.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EHow to Recognize and Avoid Employment Scams:\u003C/h3\u003E\u003Cp\u003EThere has been a rise in fake job postings used by scammers to get personal information. At Aiven, all of our emails relating to recruitment come from an @aiven.io, @greenhouse.io or @eu.greenhouse.io domain and all of our interviews are conducted by video call or in person. Our interviews will never occur via text or chat. If you\u2019re unsure of the legitimacy of a job opportunity/offer pertaining to Aiven, please don\u2019t hesitate to reach out to us at recruitment@aiven.io.\u003C/p\u003E\u003Ch3\u003EEqual Opportunities:\u003C/h3\u003E\u003Cp\u003EAiven provides equal employment opportunities to all qualified employees and applicants for employment without regard to age, gender identity, national or ethnic origin, religion, sexual orientation, physical and mental ability, marital and family status or without regard to any other similar personal attributes. Aiven complies with applicable local laws governing non-discrimination in employment in every location in which the company operates. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, transfer, leaves of absence, compensation, training and any other terms and conditions related to employment.\u003C/p\u003E\u003Cp\u003EAt Aiven we are committed to providing reasonable accommodations for qualified individuals with disabilities or special needs in our working environment and job application procedures. We make all reasonable accommodations for persons with disabilities or who otherwise need support to thrive in the workplace. We are committed to continuously improving workplace accessibility. There is an option to request a discussion in the application process but if you have any questions before applying please write to us at recruitment@aiven.io.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"staff-product-security-engineer-at-aiven36-21f1f53b9331"},"url":"https://gurify.com/job/staff-product-security-engineer-at-aiven36-21f1f53b9331","datePosted":"2026-08-10","validThrough":"2026-12-13T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Aiven36","sameAs":"https://job-boards.greenhouse.io/aiven36"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"FI","addressLocality":"Helsinki"}}} ``` ```json {"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Finland","item":"https://gurify.com/jobs/finland"},{"@type":"ListItem","position":3,"name":"Staff Product Security Engineer","item":"https://gurify.com/job/staff-product-security-engineer-at-aiven36-21f1f53b9331"}]} ```