Lead/Expert Product Security Engineer (f/m/d)

About us  

ATOSS Software SE is one of Germany’s most successful tech growth stories. As the market leader in Workforce Management Software, we help companies work more intelligently, creatively, and humanely optimizing the balance between profitability and people. 

We’re a rare company: according to Handelsblatt(10/24), just 309 public companies worldwide achieved over 20% return on sales for ten consecutive years. Only two are based in Germany and ATOSS is one of them. 

With 19 years of record breaking growth, over €2 billion market cap, and listings in SDAX and TecDAX, we’re scaling globally and we’re growing. 

If you’re ready to drive impact in a high-performing B2B SaaS environment, this is your chance to elevate your career.

The Person You are   

At ATOSS, we hire for both character and skill, seeking individuals who embody resilience, a pioneering spirit, and the passion to grow.  

We value those who:  

Think like entrepreneurs - taking ownership, pushing boundaries, and driving impact.  

Challenge the status quo - bringing fresh ideas and bold execution to the table.  

Thrive in change - seeing growth as a lifelong journey, both professionally and personally. 

The Role  

To further strengthen our security capabilities, we are seeking a  Lead Product Security Engineer  to own and drive all product security activities. Reporting to the Chief Product & Technology Officer (CPTO), you will: 

• Establish and enhance secure development practices  (Secure SDLC, DevSecOps), lead threat modeling, architecture and code reviews, and oversee vulnerability management and product-related incident response. 
• Build and operate security testing frameworks  covering regular, occasion-based, and continuous testing-and monitor product-related threat intelligence. 
• Ensure ongoing product compliance  with relevant regulations and standards (Cyber Resilience Act, EU AI Act, GDPR, ISO 27001, SOC 2), embed required controls into development workflows, and maintain audit-ready evidence such as SBOMs and documentation. 
• Security partner for AI adoption - Partner with engineering teams to securely deploy AI capabilities, establishing best practices for AI models,  secure data ingestion, and the monitoring of AI specific attack vectors. 
• Act as the primary product security contact  for presales, auditors, customer inquiries, and product security incidents, communicating transparently with technical and non-technical stakeholders. 
• Collaborate cross-functionally  with Legal, Information Security & Infrastructure Compliance, IT, Cloud Operations, and Product Management to align on regulatory interpretation, certification needs, and incident processes. 
• Use security metrics and threat insights  to continuously strengthen product security across the entire lifecycle. 
• Security advocacy & culture  by building and mentoring security champions  across engineering teams. You will act as a bridge between Legal, Product Management, and Cloud Ops to ensure security is a shared responsibility, not a bottleneck. 

Key Requirements  

• A degree from a reputed university in computer science, information security, or a related field; a Master’s or PhD is preferred. 
• 5+ years of experience in product security, application security or secure software development, including secure coding and cloud architectures. 
• A proven ability to build and operationalize security frameworks and controls across complex product environments. 
• Strong understanding of regulatory and certification landscapes and the ability to translate compliance requirements into concrete product measures. 
• Excellent communication skills in English (negotiation-ready and effective across technical and non-technical stakeholders). 

Our Benefits    

• Competitive Rewards: Including profit-sharing and employee stock program.  
• Structured Onboarding & Continuous Leadership Development: Clear career paths onboarding through Expert & Leadership Tracks, plus access to ATOSS Academy.  
• Flexible Work Culture: Hybrid options (remote within the EU), 30 days of vacation, and a strong commitment to diversity & inclusion.  
• Engaging Team Environment: Seasonal company events, team retreats, and an in-house barista.  
• Health & Wellbeing: Including regular check-ups, corporate wellness programs, and Wellhub membership.  
• Stability & Growth: Company listed on SDAX & TecDAX, with 20+ years of record-breaking revenue and a 30%+ EBIT margin. Certified Top Employer© for the 5th year in a row.  

At Atoss, great talent knows no limits. We welcome professionals from all backgrounds and empower their growth through an inclusive, skill focused environment. 

Join us and be part of a high-growth, future-focused company!