Senior Product Security Engineer

3 мес. назад

DenmarkEuropeSeniorOnsite

securitysdlctoolingcode reviewsecret handlingdata access

Lead security enablement by integrating secure practices into product development workflows at 's AI sports camera technology company.

О компании

is a global leader in AI-based sports camera technology. Our innovative, fully automatic camera solution enables sports teams to record matches and training sessions without a camera operator. We’re democratizing the world of sports by granting video analysis for teams on all levels—a privilege that used to be only for the few. More than 40,000 clubs in 90+ countries record their games every week. But what truly sets us apart? Our people . We’re a diverse group of innovative thinkers, creators, and problem-solvers who believe in delivering an incredible product—and having fun while doing it. The Opportunity We're forming a Security Enablement Team that makes it easy for every engineering team at to build, ship, and operate secure systems. You'll focus on the product security slice,

Обязанности

Build lightweight SDLC checks for unsafe queries, secrets in code, and credential handling, wired into the developer workflow
Establish patterns for safe data access, browser-side credential handling, and memory-safe handling of sensitive data
Build automated checks that surface drift when previously secured surfaces (for example, playgrounds and internal tooling) regress, so the owning teams get a signal and can act on it
Build the intake and tracking system that classifies penetration test findings on the product and surfaces them to owning teams with tracked SLAs
Create clear documentation and self-service tooling that help product engineers make secure choices without needing security expertise.
Help automate product-security control evidence for GRC, reducing manual follow-up and making controls easier to prove.

Другое

Full SDLC understanding: You've shipped product code in production and understand how security fits into real engineering workflows
Practical security experience: You've surfaced and fixed issues like SQL injection, unsafe query patterns, secrets in code, and unsafe handling of credentials in the browser
Generalist depth: You're comfortable across backend, frontend, and the integration points where most security issues live.
Platform-as-product mindset: You've built or contributed to internal tooling that real teams use, gathered feedback, and measured impact on developer productivity
CI/CD familiarity: You know how to add security feedback to build and deployment pipelines without creating unnecessary friction, including checks for dependencies, secrets, static analysis, and pipeline identity.
Carrot-not-stick instinct: You build guard rails into tools developers already use, and reach for manual review only as a last resort
Collaboration: You work through discussion and feedback, share context effectively, and write things down
You'll join a Copenhagen-based Security Enablement Team of three engineers plus a manager. We operate as an enablement function: we build shared tooling and golden paths, and we step in for focused, high-leverage missions where no other team is positioned to deliver. We do not run a SOC and we do not carry a security pager. You'll collaborate regularly with the Platform, Product, IT, Firmware, and GRC teams. We work pragmatically and iterate quickly. We document decisions, favor simple solutions where possible, and focus on tooling and platform patterns that help teams move faster with confidence. We value diversity and inclusion and welcome applicants from all backgrounds. If your experience does not match every qualification exactly, we still encourage you to apply. What matters most is