> Markdown version of [/jobs/ext/4678525-product-security-engineering-lead](https://www.wearedevelopers.com/jobs/ext/4678525-product-security-engineering-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Product Security & Engineering Lead

- **Company:** Implico GmbH
- **Location:** Hamburg, Germany
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Continuous Integration, Corona (Software Development Kit), Information Leak Prevention, DevOps, Key Management, Open Web Application Security, PCI Data Security Standards, Software Architecture, Secure Coding, Software Vulnerability Management, Large Language Models, Software Security, Generative AI, SAP Business Technology Platform, Agentic-AI, Kubernetes, Prompt Injection, Devsecops, Microservices
- **Published:** November 12, 2026
- **Apply:** https://www.adzuna.de/details/5961646432

## About the Role

* Several years of hands-on experience in Product Security, Application Security, Cloud Security, Security Architecture or DevSecOps.
 * Strong technical understanding of modern software architectures and development environments, particularly APIs, microservices, containers, Kubernetes and CI/CD.
 * Practical experience with Threat Modeling, Secure Coding, Security Testing, Vulnerability Management and Software Supply Chain Security.
 * Good knowledge of PCI DSS and relevant standards and frameworks such as OWASP/OWASP ASVS, NIST or ISO 27001, as well as experience translating compliance requirements into technical controls and reliable audit evidence.
 * Experience with Microsoft Azure and/or AWS; knowledge of SAP BTP, CAP or Kyma is a plus.
 * Understanding of security risks and protection mechanisms related to Generative AI, LLMs and agentic systems.
 * You are able to bring technical and regulatory requirements together pragmatically, communicate them clearly and drive implementation together with different stakeholders.

## Description

Security should not be reviewed only at the end of a development process. It should be an integral part of our products and engineering processes from the very beginning.We are looking for a Product Security & Engineering Lead who will take functional ownership of Security and Compliance within Product & Engineering. You combine technical security expertise with a pragmatic understanding of modern software development and translate requirements such as PCI DSS into concrete technical standards, processes and controls.

 * You own Product & Engineering Security and continuously develop the related standards, processes, technical controls and guardrails.
 * You embed Security by Design, SSDLC and DevSecOps into our development processes, including automated security testing, dependency and container scanning, and secrets management.
 * You translate PCI DSS and other regulatory or contractual requirements into technical measures, engineering processes and clear release criteria.
 * You define security standards for our software and cloud landscape, including Microsoft Azure, AWS, SAP BTP, CAP, Kyma/Kubernetes, APIs and integration architectures.
 * You lead Threat Modeling, Security Architecture Reviews, Vulnerability Management and Penetration Tests, including the tracking of required remediation measures.
 * You develop security guardrails for Generative AI, LLM integrations and AI Agents, for example around Access Control, Prompt Injection and Data Leakage.
 * You support Security Assessments, Audits and Certifications and work closely with Product, Engineering, Enterprise Architecture, Cloud/DevOps and Corporate Information Security.

What is important to usWe are not looking for a pure Compliance Manager, but for someone with enough technical depth to develop robust solutions together with Engineering teams. Your goal is to establish pragmatic security controls without turning Security into a delivery bottleneck. Security and Continuous Compliance should become an integral part of our product development.Your profile