Product Security Engineer

**Join Proton and build a better internet where privacy is the default** At Proton, we believe that privacy is a fundamental human right and the cornerstone of democracy. Since our inception in 2014, founded by a team of scientists from CERN, we have dedicated ourselves to providing free and open-source technology to millions worldwide, ensuring access to privacy, security, and freedom online. Our journey began with Proton Mail, the largest secure email service globally, and has since expanded to include Proton VPN, Proton Calendar, Proton Drive, and Proton Pass. These tools empower individuals and organizations to take control of their personal data, break away from Big Tech’s invasive practices, and defeat censorship. Our work impacts hundreds of millions of lives, from activists on the front lines defending freedom to leaders in governments protecting sensitive information. In some cases, Proton’s services have even been instrumental in saving lives by enabling secure and private communications in high-risk situations. Proton is a profitable company that does not rely upon VC funding, supporting over 100 million user accounts with a growing team of over 500 people from over 50 different countries, from the world's top companies and universities. We value intelligence, learning potential, and ambition in our hiring process. Adaptability is key as we navigate uncharted territories and redefine how business is conducted online. Hiring at Proton is highly selective, with less than 1% of candidates hired. We believe smaller teams of exceptional talent will always prevail over larger teams with lower talent density. You will have the opportunity work with many of the world's top minds in their fields, ranging from former international math and science olympiad winners to chess champions. We have a global mindset and big ambitions but remain a start-up at heart. We value empowerment and flexibility and keep our structure flat to keep moving fast and avoid unnecessary politics. Tired of blending into the crowd? Join us and do work you can truly be proud of. Check our **open-source**projects **[here](https://proton.me/community/open-source)!** **The Team:** We’re looking for a visionary security professional who combines deep expertise with genuine passion; to drive meaningful change across our growing organisation. This role sits at the heart of what Proton stands for and fulfills the trust our users place in us every day. You’ll be encouraged to challenge the status quo, innovate efficiently, and collaborate daily with some of the brightest minds who truly care about protecting privacy and building secure products. **Tech Stack and Tools:** - Proton currently offers the following products: Mail, Calendar, VPN, Pass, Drive, each of which is available on multiple platforms, including Windows, MacOS, iOS and Linux. - Our infrastructure is entirely composed of Linux machines. - Wherever we can, we make use of open-source technologies. **About the role:** You will be leading our efforts to ensure that Proton's applications are secure **What you will be doing:** - Set the north star – Define a compelling vision and roadmap for product security that inspires the whole organisation. - Build the function – Find the best people to work with you and build your dream product security team - Be the go-to hero-in – Serve as go-to person for product security across the entire company, influencing strategy, design, and delivery. - Architect secure products – Partner with product managers, designers, and developers to embed security from day one, turning risk-aware thinking into a habit. - Create playbooks & policies – Design clear, developer-friendly security guidelines and automated workflows that keep code secure without killing velocity. - Empower engineers – Build the tools, processes, and culture that let developers ship fast and safe. - Lead the bug bounty program – Turn the global security community into an extension of our own team. - Influence roadmaps – Sit at the table with product leads, shaping priorities and ensuring security considerations are baked into every release. **What we are looking for:** - 3+ years in application security (SaaS or privacy-focused) - Experience reviewing code for security issues - Experience working on remediation of app security findings with affected teams - Experience with penetration testing - Experience with SAST tooling - Experience driving process definition and implementation across the full SDLC **Nice to have:** - Experience with AI-based security reviews - Experience managing a bug bounty programme Even if you don’t meet all the requirements listed above, but feel you could still be a great fit, please still apply. **What We Offer** - **Office First:** Collaboration is easier and more effective in person, which is why we have offices in Geneva, Zurich, Prague, Barcelona, Paris, London, Vilnius, Skopje, and Taipei. You can also enjoy working from home up to 30% of the time, while enjoying great company during our three core days in the office. Depending on the role, fully remote positions may also be available. - **Technology:** We provide all the devices and software you need to excel in your role, ensuring you have the best tools at your disposal to achieve your goals. - **Food:** Lunch and snacks are provided by Proton every day at our offices. - **Transport:**We will always support our employees with transport costs through subsidizing public transport, bike allowances, or parking spaces based on your office location. - **Stock Options:** At Proton, we are all owners of the company and you get stock options when you join us. - **Flexible Working:**You can define your own working hours as long as it works with team meetings. - **Learning and Development:** We are committed to your professional growth. Proton offers various learning opportunities, including training programs, conferences and events, and continual learning. - **Employee Benefits:** Comprehensive health insurance plans, competitive retirement savings options, generous vacation and leave policies, and wellness programs. - **Work that Matters:** Proton is a community-first organization, started with the support of a crowdfunding campaign and built with community input. To this day, Proton’s only source of revenue is user subscriptions. Over 100 million people trust and support Proton, and we put our users and community first in everything we do. Read more about our impact[here](https://proton.me/impact). **Our Commitment to Diversity and Inclusion** At Proton, we believe diversity drives innovation and strengthens our mission to provide privacy as a default for all. We are committed to fostering an inclusive environment where all individuals, regardless of race, ethnicity, gender, age, sexual orientation, physical ability, or socio-economic background, feel valued and empowered. We strive to create equal opportunities, promote open dialogue, and support continuous learning to ensure every voice is heard and respected. If you need any extra support or reasonable adjustments during the hiring process, please let your talent partner know. **Candidate Privacy Notice** When you apply for a position, refer a candidate, or are considered for a role at Proton Technologies AG (Proton, we, us, or our), your information is stored in Greenhouse, in accordance with their [Service Privacy Policy.](https://www.greenhouse.com/privacy-policy) This information is used to evaluate your suitability for the posted position. We also retain this information for consideration for future roles that you may apply for or that we believe may align with your background and skills. If we no longer have a legitimate business need to process your information, we will either delete or anonymize it. Should you have any inquiries about how we use or manage your information, or if you wish to access, correct, or delete your data, please contact our privacy team at . *Proton does not accept unsolicited resumes from any sources other than directly from candidates. We will not pay a fee for any placement resulting from an unsolicited offer, even if the candidate is subsequently hired by Proton.* *To learn more about our privacy policy, please visit*[*our privacy policy page*](https://boards.eu.greenhouse.io/protongdpr)*.* #LI-Onsite