{"id":2009890,"url":"https://alion.io/job/talon-one-product-security-engineer","title":"Product Security Engineer","company":{"id":8449,"name":"Talon.One","domain":"talon.one","url":"https://alion.io/company/talon-one","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Berlin, Germany"],"countries":["DE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":84000,"max_usd":179000,"period":"year","method":"role_country_seniority_unknown","sample_n":50},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Datadog","optional":false},{"name":"Function Calling","optional":false},{"name":"GCP","optional":false},{"name":"Kubernetes","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SIEM","optional":false},{"name":"STRIDE","optional":false},{"name":"Tool Use","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-09-04T00:17:04Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-12T03:16:30Z","board_verified":true,"closed_at":null,"days_open":38,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":38},"description":"Join Talon.One, a leading platform for promotions and loyalty in Europe. As a Product Security Engineer, you will be responsible for the security of everything we ship to our customers and third-party partners. You will work hands-on with engineers and product managers, threat-modeling new product features, owning tenant isolation and API security, and building automated testing. You will also run a security champions program and experiment with AI to identify and remediate product security risks at scale.\nMissions\nThreat-model new product features before they're built, including AI-embedded ones, and turn what you find into real engineering work.\nOwn tenant isolation and API security across our Rule Engine, Integration API, Management API, CAMA, UCP Predict features, Talon.One MCP and third-party integrations.\nBuild automated cross-tenant and adversarial testing that runs in CI, so isolation gets checked on every build, not only during our external yearly Pentest iterations.\nProfil recherché\n - Design API security end-to-end: authentication, credential lifecycle, rate limiting, abuse resistance and webhook security- Experience with a multi-tenant SaaS platform's authorization and tenant isolation model, and strong knowledge of how to test for broken object-level authorization automatically\n- Strong knowledge of OWASP security guidance, including the OWASP Top 10, API Security Top 10, and Top 10 for Large Language Model Applications\n- Hands-on experience with Google Cloud security, Kubernetes, and tools like Wiz and Datadog\n- Practical experience implementing and tuning SAST and DAST tools in CI/CD workflows, with a focus on useful developer feedback and effective vulnerability remediation\n- Understanding how AI features actually get built, retrieval, context assembly, tool calling, agent loops, and know where indirect prompt injection breaks multi-tenant isolation\n- Know how to build security monitoring and detections in-house tools (SIEM) yourself, from designing the signal through tuning it and writing the runbook\n- Experience with shipping production code, whether you come from software engineering or from security work that includes coding\n- Ability to influence engineers who don't report to you, and feel comfortable being early in a function with no existing playbook\n- Hands-on experience with threat-modelling methodologies such as STRIDE, translating identified threats into actionable engineering requirements and security tests","description_format":"text","description_chars":2478,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Sales & Marketing","Loyalty Programs","Coupons, Deals & Cashbacks"],"lifecycle":[{"event":"open","at":"2026-10-07T13:00:29Z"}],"visa":[],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.503,"p_room":0.55,"age_days":36,"expected_fill_days":33,"reasons":["conf:0","win:tail"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/talon-one-product-security-engineer","json_url":"https://alion.io/job/talon-one-product-security-engineer.json","meta":{"generated_at":"2026-10-12T05:28:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8754,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8449},"rest":"https://alion.io/mcp/rest/get_company?id=8449"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftalon-one-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftalon-one-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftalon-one-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/talon-one-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftalon-one-product-security-engineer"}]}