# Product Security Engineer

> GoMining · Cyprus (Remote) · — · Posted 2026-08-04

**Workplace:** remote

## Description

As our platform continues to scale, security becomes a core product capability rather than a separate function. We're looking for a Product Security Engineer who can partner directly with engineering teams to build secure systems from the ground up.

This is a highly technical, hands-on role where you'll improve the security of our applications, cloud infrastructure, APIs, and development lifecycle.

### Responsibilities

Application Security

-   Review application architecture and new product features from a security perspective.
-   Identify security vulnerabilities across backend services, APIs, mobile applications, and web platforms.
-   Perform threat modeling and security design reviews.
-   Support internal and external penetration testing activities.

Secure Development

-   Build and improve Secure SDLC across engineering teams.
-   Integrate security tooling into CI/CD pipelines.
-   Improve developer security practices and provide technical guidance.
-   Help engineering teams remediate vulnerabilities.

Cloud & Infrastructure Security

-   Improve the security posture of our cloud infrastructure.
-   Secure Kubernetes environments, IAM policies, secrets management, and infrastructure components.
-   Implement security monitoring and hardening best practices.
-   Work closely with Platform and DevOps teams.

Security Automation

-   Deploy and maintain SAST, DAST, dependency scanning, container scanning, and secret detection.
-   Automate security checks and developer workflows.
-   Continuously improve security visibility across the engineering organization.

## Requirements

-   4+ years of experience in Product Security, Application Security, Software Engineering, or Security Engineering.
-   Strong software engineering background.
-   Experience securing backend systems, REST APIs, and microservices.
-   Experience with cloud platforms (AWS, GCP, or Azure).
-   Strong understanding of Kubernetes, Docker, networking, and infrastructure security.
-   Experience with Secure SDLC and security automation.
-   Hands-on experience with SAST, DAST, dependency scanning, and secrets management.
-   Understanding of OWASP Top 10, common attack vectors, and secure coding practices.
-   Ability to work closely with software engineers and influence technical decisions.
-   Fluent English.

### Nice to have

-   Mobile application security experience.
-   Experience in fintech, crypto, payments, or blockchain.
-   Offensive security or penetration testing experience.
-   Security certifications are a plus but not required.

## Benefits

-   Professional growth: support for courses, conferences, and English learning (up to 100% coverage).
-   Work-life fit: remote or hybrid format with flexible hours across international teams.
-   Paid leave: up to 20 vacation days +  8 company holidays + 5 personal days per year
-   Recognition programs: structured performance reviews and team awards.
-   Team culture: retreats in international locations (for example, company apartments in Cyprus).

## Apply

[Apply at GoMining](https://apply.workable.com/gomining/j/EDA4DA2740/apply)

---
Powered by [Workable](https://www.workable.com)