Overview
As n8n’s first dedicated security hire, you own the product security posture and help embed security as a core engineering pillar. You’ll partner with engineering leadership to scale security across a fast-growing, open-source-driven SaaS platform. You’ll lead vulnerability management, threat modeling, and secure SDLC practices, working with cross-functional teams to enable secure shipping without friction. This role offers autonomy, impact, and ongoing influence as the company scales. You’ll join a collaborative, security-minded culture built on pragmatism and openness.
Pay / Benefits
- competitive compensation
- equity
- remote-first
- health plans (US/Europe)
- 401(k) with match
- learning budget
Responsibilities
- Own vulnerability intake and triage process ()
- Design and run Vulnerability Disclosure Program with SLAs
- Coordinate private fixes and coordinated disclosure timelines
- Manage GitHub Security Advisories and bug bounty communications
- Define patch and release processes for security fixes
- Evaluate and maintain security tooling across SDLC (SAST, DAST, dependency and container scanning)
- Plan third‑party penetration tests and remediation tracking
- Lead security incidents from detection to resolution and communicate with customers
- Define security policies, standards, and disclosure documentation
- Embed security into SDLC via threat modeling and guardrails
- Advise engineering on secure coding and vulnerability patterns
- Collaborate with Nodes, AI Core, Cloud to build security in early
- Contribute to post-incident reviews and security advisories
- Shape long-term security strategy with engineering leadership
Key requirements
- 5+ years in product security or related role
- Hands-on vulnerability management and disclosure experience
- Strong understanding of OWASP Top 10
- Experience with SAST, DAST, dependency and container scanning
- Familiarity with coordinated vulnerability disclosure and advisories
- Ability to write clear security documentation for technical and non-technical audiences
- Experience engaging with security researchers or bug bounty programs
- Pragmatic risk reduction mindset
- Ability to enable product velocity while maintaining security
- Comfort with ambiguity and ownership
- SAST/DAST tooling and vulnerability management
- Dependency and container scanning, SBOMs
- Security incident response and coordination
Sr Product Security Engineer | Remote | Europe employer: n8n
At n8n, we pride ourselves on being an exceptional employer that fosters a dynamic and inclusive work culture, perfect for those looking to thrive in the fast-paced world of enterprise SaaS. Our remote-first approach allows you to work flexibly while enjoying comprehensive benefits, continuous professional development opportunities, and a supportive team environment that encourages innovation and collaboration. Join us in Northern Europe and be part of a company that values your contributions and empowers you to make a meaningful impact.
