Lead​/Expert Product Security Engineer; f​/m​/d

ATOSS Software SE is one of Germany’s most successful tech growth stories. As the market leader in Workforce Management Software, we help companies work more intelligently, creatively, and humanely optimizing the balance between profitability and people.

ATOSS Software SE is one of Germany’s most successful tech growth stories. As the market leader in Workforce Management Software, we help companies work more intelligently, creatively, and humanely optimizing the balance between profitability and people.

We’re a rare company: according to Handelsblatt (10/24), just 309 public companies worldwide achieved over 20% return on sales for ten consecutive years. Only two are based in Germany and ATOSS is one of them.

With 19 years of record breaking growth, over €2 billion market cap, and listings in SDAX and TecDAX, we’re scaling globally and we’re growing.

If you’re ready to drive impact in a high-performing B2B SaaS environment, this is your chance to elevate your career.

At ATOSS, we hire for both character and skill, seeking individuals who embody resilience, a pioneering spirit, and the passion to grow.

• Think like entrepreneurs – taking ownership, pushing boundaries, and driving impact.
• Challenge the status quo – bringing fresh ideas and bold execution to the table.
• Thrive in change – seeing growth as a lifelong journey, both professionally and personally.

To Further Strengthen Our Security Capabilities, We Are Seeking a Lead Product Security Engineer To Own And Drive All Product Security Activities. Reporting To The Chief Product & Technology Officer (CPTO), You Will

• Establish and enhance secure development practices (Secure SDLC, Dev Sec Ops ), lead threat modeling, architecture and code reviews, and oversee vulnerability management and product‑related incident response.
• Build and operate security testing frameworks covering regular, occasion‑based, and continuous testing—and monitor product‑related threat intelligence.
• Ensure ongoing product compliance with relevant regulations and standards (Cyber Resilience Act, EU AI Act, GDPR, ISO 27001, SOC
  2), embed required controls into development workflows, and maintain audit‑ready evidence such as SBOMs and documentation.
• Security partner for AI adoption - Partner with engineering teams to securely deploy AI capabilities, establishing best practices for AI models, secure data ingestion, and the monitoring of AI specific attack vectors.
• Act as the primary product security contact for presales, auditors, customer inquiries, and product security incidents, communicating transparently with technical and non‑technical stakeholders.
• Collaborate cross‑functionally with Legal, Information Security & Infrastructure Compliance, IT, Cloud Operations, and Product Management to align on regulatory interpretation, certification needs, and incident processes.
• Use security metrics and threat insights to continuously strengthen product security across the entire lifecycle.
• Security advocacy & culture by building and mentoring security champions across engineering teams. You will act as a bridge between Legal, Product Management, and Cloud Ops to ensure security is a shared responsibility, not a bottleneck.

• A degree from a reputed university in computer science, information security, or a related field; a Master’s or PhD is preferred.
• 5+ years of experience in product security, application security or secure software development, including secure coding and cloud architectures.
• A proven ability to build and operationalize security frameworks and controls across complex product environments.
• Strong understanding of regulatory and certification landscapes and the ability to translate compliance…