Product Security Engineer

About the role

As GoMining scales its platform, security is becoming a core product capability. We are looking for a hands‑on Product Security Engineer to partner with engineering teams and embed security into applications, cloud infrastructure, APIs and the development lifecycle.

Key responsibilities

• Review application architecture and new features for security risks, perform threat modeling and support penetration testing.
• Build and improve a Secure SDLC, integrate security tooling into CI/CD pipelines and guide developers on remediation.
• Enhance cloud and Kubernetes security, manage IAM policies, secrets and implement monitoring and hardening practices.
• Deploy and maintain SAST, DAST, dependency and container scanning, automate security checks and increase visibility across engineering.

Required profile

• 4+ years in product or application security, software or security engineering.
• Strong software engineering background with experience securing backend services, REST APIs and micro‑services.
• Hands‑on experience with cloud platforms (AWS, GCP or Azure) and container orchestration (Kubernetes, Docker).
• Fluent English and ability to influence engineering decisions.

Required skills

• Application security, OWASP Top 10, threat modeling.
• Secure SDLC, CI/CD integration.
• Kubernetes, Docker, networking, IAM.
• SAST, DAST, dependency scanning, secret detection.

What we offer

• Professional growth support for courses, conferences and English learning (up to 100% coverage).
• Remote or hybrid work with flexible hours across international teams.
• Paid leave: up to 20 vacation days, 8 company holidays and 5 personal days.
• Recognition programs, performance reviews and team awards.
• Team retreats in international locations (e.g., company apartments in Cyprus).