{"id":128639,"url":"https://alion.io/job/aras-product-security-engineer-mfd-2","title":"Product Security Engineer (m/f/d)","company":{"id":17315,"name":"Aras","domain":"aras.com","url":"https://alion.io/company/aras","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BambooHR","truth_index":{"grade":"A","score":88,"open_postings":8,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":50,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Groovy","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Azure DevOps","optional":true},{"name":"Bicep","optional":true},{"name":"CIS Benchmarks","optional":true},{"name":"CloudFormation","optional":true},{"name":"OWASP","optional":true},{"name":"OWASP ASVS","optional":true},{"name":"OWASP SAMM","optional":true},{"name":"SBOM","optional":true},{"name":"Sigstore","optional":true},{"name":"SLSA","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-08-25T00:00:00Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-17T10:09:37Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"Position: Product Security Engineer (m/f/d)\nLocation: Available to candidates located in Poland\nAras is expanding itsProduct Securityteam and is seeking a Product Security Engineer with strong DevOps expertise to help secure our products, cloud platforms, and software development lifecycle. This role will be responsible for designing, implementing, and maintaining secure CI/CD pipelines, integrating security controls throughout the development process, and driving a security-first engineering culture across product and cloud teams.\nPart of the responsibilities would be the response to incidents, triage of found issues and communication with Product Development team on daily basis. As part of the Product Security organization, you will partner closely with software engineers, cloud architects, DevOps teams, and security stakeholders to identify, prioritize, and remediate security risks at scale. You will play a key role in advancing Aras' Security maturity. This position requires strong technical expertise, excellent communication skills, and hands-on experience integrating SAST, DAST, SCA, container security, and cloud security controls into modern CI/CD environments.\nKey Responsibilities\nDevSecOps Engineering\nDesign, develop, and maintain secure CI/CD pipelines using Jenkins, Kubernetes, Azure, and cloud-native technologies.\nIntegrate security controls and automated security testing into the software delivery lifecycle.\nImplement and manage SAST, DAST, SCA, secrets detection, IaC scanning, container security, and software supply chain security controls.\nDrive security automation initiatives to reduce manual effort and accelerate secure software delivery.\nDocument and verify the existing security mitigations and identify if additional mitigations are required for our products.\nWork with product development teams to guide mitigation development.\nContribute to the development and implementation of security tests and verification protocols. Assist in conducting security verification and validation efforts.\nProduct Security\nCollaborate with product, development, and cloud engineering teams to embed security requirements throughout the SDLC.\nConduct security reviews of applications, infrastructure, CI/CD workflows, and deployment architectures.\nSupport threat modeling, risk assessments, and secure design reviews.\nHelp establish security baselines, hardening standards, and secure deployment practices.\nEngineering & Collaboration\nDevelop automation solutions using Python, PowerShell, Bash, or Groovy.\nProvide expertise in Agile.\nParticipate in daily standups, sprint planning, retrospectives, and collaborative design sessions.\nContinuously evaluate new tools, technologies, and approaches to improve security effectiveness and developer experience.\nRequired Qualifications\n4+ years of hands-on experience with Jenkins or similar CI/CD platforms.\n3+ years of software development, automation, or scripting experience using Python, PowerShell, Bash, or equivalent languages.\nExperience integrating security tooling into CI/CD pipelines, including SAST, DAST, SCA, container scanning, and secrets management.\nWorking knowledge of cloud security principles and services in Azure and/or AWS.\nUnderstanding of containerized environments and Kubernetes security concepts.\nExperience collaborating with engineering teams in Agile development environments.\nStrong analytical, troubleshooting, and problem-solving skills.\nSelf-motivated with the ability to work independently and manage multiple priorities.\nBachelor’s degree in computer science, Information Technology, Cybersecurity, or equivalent practical experience.\nPreferred Qualifications\nExperience with Infrastructure as Code (Terraform, Bicep, CloudFormation).\nExperience with Azure DevOps pipelines and security integrations.\nFamiliarity with software supply chain security practices and frameworks (SBOM, SLSA, Sigstore, provenance validation).\nExperience securing Kubernetes and cloud-native platforms.\nFamiliarity with AI-assisted development tools and secure AI engineering practices.\nKnowledge of security frameworks such as NIST SSDF, OWASP SAMM, OWASP ASVS, and CIS Benchmarks.\nCertifications\nOne or more of the following certifications are highly desirable:\nMicrosoft Certified: Azure Security Engineer Associate\nMicrosoft Certified: DevOps Engineer Expert\nCertified Kubernetes Security Specialist (CKS)\nCertified Kubernetes Administrator (CKA)\nWhat Success Looks Like\nSecurity controls are seamlessly integrated into engineering workflows with minimal developer friction.\nVulnerabilities are identified and remediated earlier in the SDLC.\nSecurity testing and compliance checks are automated wherever possible.\nProduct teams actively embrace DevSecOps and secure-by-design principles.\nSecurity becomes an engineering accelerator rather than a deployment bottleneck.","description_format":"text","description_chars":4865,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["CAD, PLM & BIM Software"],"lifecycle":[{"event":"open","at":"2026-08-25T00:00:00Z"}],"visa":[],"liveness":{"score":43,"band":"fade","label":"Fading","p_open":1,"p_active":0.791,"p_room":0.55,"age_days":53,"expected_fill_days":50,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/aras-product-security-engineer-mfd-2","json_url":"https://alion.io/job/aras-product-security-engineer-mfd-2.json","meta":{"generated_at":"2026-10-17T12:38:21Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16796,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17315},"rest":"https://alion.io/mcp/rest/get_company?id=17315"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faras-product-security-engineer-mfd-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faras-product-security-engineer-mfd-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faras-product-security-engineer-mfd-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/aras-product-security-engineer-mfd-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faras-product-security-engineer-mfd-2"}]}