Sr Product Security Engineer | Remote | Europe

n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no-code, so they can automate faster, smarter, and without limits. Backed by a fiercely inventive community and 500+ builder-approved integrations, we’re changing the way people bring systems together and scale ideas for impact.

Since our founding in 2019, we’ve grown into a diverse team of over 260 - working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve:

• Cultivated a community of more than 650,000 active developers and builders
• Earned 190K+ Git Hub stars, making us one of the world’s Top 40 most popular projects
• Backed by top investors, from Sequoia’s first German seed to our SAP's recent strategic investment - bringing us to a $5.2bn valuation

That’s the company we’ve built. Now we’d love to see what you can build.

We’re in a defining moment of an incredible journey. Come and build with us.

You’ll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You’ll help us build a move from reactive security management to a proactive, scalable security practice.

• Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations.
• Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls.
• Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently.

• Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact.
• Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes.
• Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and Git Hub Security Advisories.

• Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications.
• Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents.
• Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk.

• Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations.
• Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests.
• Partner with Legal, Finance, IT, and other stakeholders to assess security risks,…