Sr Product Security Engineer | Remote | Europe

About n8n

n8n is the open workflow orchestration platform built for the new era of AI. We give technical teams the freedom of code with the speed of no‑code, so they can automate faster, smarter, and without limits. Backed by a fierce inventive community and 500+ builder‑approved integrations, we’re changing the way people bring systems together and scale ideas for impact.

Since our founding in 2019, we’ve grown into a diverse team of over 220 working across Europe and the US, connected by a shared builder spirit and with our centre of gravity in Berlin. Along the way, we’ve:

• Cultivated a community of more than 650,000 active developers and builders
• Earned 145k+ Git Hub stars, making us one of the world’s Top 40 most popular projects
• Been ranked as one of Europe’s most promising privately held SaaS startups (4th in Sifted’s 2025 B2B SaaS Rising 100)
• Raised $240m to date, from Sequoia’s first German seed to our recent $180m Series C – bringing us to a $2.5bn valuation

We’re in a defining moment of an incredible journey. Come and build with us.

Your main goal will be to strengthen n8n’s product and platform security by driving hands‑on security work that helps engineering teams reduce risk, ship securely, and build a growing security practice from an early stage. You’ll partner with the Head of Security in a 50+ person engineering department to run key security workflows, improve security across the SDLC, and lay the foundations of a small but growing security team.

• Own day‑to‑day vulnerability intake and triage workflows, including the security inbox and bug bounty submissions
• Coordinate remediation with engineering teams and help track issues through to resolution with clear priorities and follow‑through
• Support coordinated disclosures, Git Hub Security Advisories, and researcher communication in a timely and structured way
• Operate and improve security tooling across the SDLC, including scanning, alert triage, and workflow tuning
• Run practical security assessments such as targeted reviews, validation of findings, and remediation tracking from internal or external testing
• Help improve visibility into product and platform risk through actionable findings, documentation, and technical recommendations
• Partner with engineers to embed security into design, development, and release processes in pragmatic ways
• Support threat modelling, secure coding guidance, and lightweight security reviews across product and platform areas
• Create clear, useful documentation that helps teams understand risks and apply secure development practices
• Support the coordination of security incidents by helping with investigation, tracking, communication, and follow‑up actions
• Contribute to playbooks, runbooks, and internal processes that improve security readiness over time
• Help shape how the security function works in practice as the team grows, together with the Head of Security and future hires

• Product security experience: 5+ years in product security, application security, or a closely related security engineering role in a SaaS or cloud environment
• Vulnerability management skills:
  Hands‑on experience triaging, validating, and coordinating remediation for security findings
• Web application security knowledge:
  Strong understanding of common web vulnerabilities and secure development principles
• Security tooling experience:
  Worked with tools such as SAST, DAST, dependency scanning, container scanning, or similar technologies in practice
• Engineering partnership:
  Works well with product and engineering teams and knows how to support them without becoming a blocker
• Clear communication:
  Documents findings, explains risks, and communicates clearly with both technical and non‑technical stakeholders
• Pragmatic execution:
  Prioritises well, focuses on the most meaningful risks, and makes progress in fast‑moving environments
• Builder mindset:
  Excited by the idea of joining a newly forming security team and shaping how the function grows over time

• Cloud and platform security exposure:
  Experience securing cloud‑native or multi‑tenant SaaS platforms
• JavaScript / Type Script familiarity:
  Unde…