{"id":4067260,"url":"https://alion.io/job/implico-product-security-engineering-lead-mfd","title":"Product Security & Engineering Lead (m/f/d)","company":{"id":695176,"name":"Implico","domain":"implico.com","url":"https://alion.io/company/implico","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Personio","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hamburg, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"PCI DSS","optional":false},{"name":"SAP BTP","optional":false},{"name":"Threat Modeling","optional":false},{"name":"ABAP","optional":true}],"status":"live","first_seen_at":"2026-11-11T08:47:40Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T11:58:53Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Your mission\nSecurity should not be reviewed only at the end of a development process. It should be an integral part of our products and engineering processes from the very beginning.\nWe are looking for aProduct Security & Engineering Leadwho will take functional ownership of Security and Compliance within Product & Engineering. You combine technical security expertise with a pragmatic understanding of modern software development and translate requirements such as PCI DSS into concrete technical standards, processes and controls.\nYou own Product & Engineering Security and continuously develop the related standards, processes, technical controls and guardrails.\nYou embed Security by Design, SSDLC and DevSecOps into our development processes, including automated security testing, dependency and container scanning, and secrets management.\nYou translate PCI DSS and other regulatory or contractual requirements into technical measures, engineering processes and clear release criteria.\nYou define security standards for our software and cloud landscape, including Microsoft Azure, AWS, SAP BTP, CAP, Kyma/Kubernetes, APIs and integration architectures.\nYou lead Threat Modeling, Security Architecture Reviews, Vulnerability Management and Penetration Tests, including the tracking of required remediation measures.\nYou develop security guardrails for Generative AI, LLM integrations and AI Agents, for example around Access Control, Prompt Injection and Data Leakage.\nYou support Security Assessments, Audits and Certifications and work closely with Product, Engineering, Enterprise Architecture, Cloud/DevOps and Corporate Information Security.\nWhat is important to us\nWe are not looking for a pureCompliance Manager, but for someone with enough technical depth to develop robust solutions together with Engineering teams. Your goal is to establish pragmatic security controls without turning Security into a delivery bottleneck. Security and Continuous Compliance should become an integral part of our product development.\nYour profile\nSeveral years of hands-on experience in Product Security, Application Security, Cloud Security, Security Architecture or DevSecOps.\nStrong technical understanding of modern software architectures and development environments, particularly APIs, microservices, containers, Kubernetes and CI/CD.\nPractical experience with Threat Modeling, Secure Coding, Security Testing, Vulnerability Management and Software Supply Chain Security.\nGood knowledge of PCI DSS and relevant standards and frameworks such as OWASP/OWASP ASVS, NIST or ISO 27001, as well as experience translating compliance requirements into technical controls and reliable audit evidence.\nExperience with Microsoft Azure and/or AWS; knowledge of SAP BTP, CAP or Kyma is a plus.\nUnderstanding of security risks and protection mechanisms related to Generative AI, LLMs and agentic systems.\nYou are able to bring technical and regulatory requirements together pragmatically, communicate them clearly and drive implementation together with different stakeholders.\nWhy us?\nWe support mobile and flexible working, including the option to work temporarily from abroad by agreement.\nOur working time account gives you the flexibility to balance work and personal commitments in a way that suits your life.\nOur Works Council is available to provide support and advice whenever needed. 30 days of annual leave are standard for us.\nWe support your personal and professional development through a transparent career framework as well as individual learning and development opportunities.\nContinuous learning is part of our company culture, which is why we actively support ongoing professional development.\nThrough our JobRad program, you can lease a bicycle or e-bike of your choice, including more than one bike.\nWith WellPass, you get access to a broad Germany-wide network of fitness, sports, wellness and health services.\nRegular team and company events strengthen our open culture and create opportunities for personal exchange.\nYou can expect an international working environment with colleagues and customers from different countries and cultures.\nOur global team continues to grow. Join us and actively shape the next chapter of Implico's success story.\nWe look forward to receiving your application, preferably online via our application portal so we can ensure a faster process. Alternatively, you are also welcome to send us your application documents by post.","description_format":"text","description_chars":4468,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Company events","Continuous learning","Flexible schedule","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Oil & Gas","Enterprise Apps Implementation Partners","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-11-11T11:58:53Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":70,"reasons":["conf:4","win:early"],"computed_at":"2026-11-11T16:46:38Z"},"pay":null,"html_url":"https://alion.io/job/implico-product-security-engineering-lead-mfd","json_url":"https://alion.io/job/implico-product-security-engineering-lead-mfd.json","meta":{"generated_at":"2026-11-11T16:46:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":31815,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":695176},"rest":"https://alion.io/mcp/rest/get_company?id=695176"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fimplico-product-security-engineering-lead-mfd"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fimplico-product-security-engineering-lead-mfd"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fimplico-product-security-engineering-lead-mfd"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/implico-product-security-engineering-lead-mfd\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fimplico-product-security-engineering-lead-mfd"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4067260}},{"tool":"search_jobs","arguments":{"company":"implico.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4067260},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}