[Hiring] Senior Product Security Engineer @n8n

Role Description

Your main goal will be to identify and reduce security risks across n8n's product and internal systems, using threat modelling, hands-on security expertise, and cross-functional collaboration to help teams design, build, and operate more secure systems.

You'll join our growing security team at a pivotal stage, acting as a trusted security partner to teams across the business. You'll help us move from reactive security management to a proactive, scalable security practice.

• Threat Modelling, Risk Assessment & Security Design:
  • Conduct threat modelling and risk assessments across product features, AI agents, cloud infrastructure, corporate IT, internal applications, and data systems, identifying vulnerabilities and recommending practical mitigations.
  • Partner with Engineering, Cloud, IT, and Data teams to review security designs, define actionable security requirements, and influence the implementation of appropriate controls.
  • Help teams embed security into their development processes through secure coding guidance, design reviews, documentation, and security tooling that enables them to identify and address risks independently.
• Security Operations & Incident Readiness:
  • Help establish and improve logging, detection, and protective monitoring capabilities across our infrastructure, corporate systems, and internal applications.
  • Develop and improve incident response processes, runbooks, and exercises to strengthen our ability to detect, investigate, and respond to security incidents.
  • Work closely with system owners to identify security gaps, prioritise remediation, and verify that implemented controls effectively reduce risk.
• Vulnerability Management & Coordinated Disclosure:
  • Participate in the security triage rotation, assessing incoming vulnerability reports, validating findings, and prioritising remediation based on severity and business impact.
  • Collaborate with engineering teams to coordinate vulnerability remediation, verify fixes, and support secure patch and release processes.
  • Help manage our vulnerability disclosure and bug bounty programmes, including engagement with security researchers, coordinated disclosures, and GitHub Security Advisories.
• Customer Trust & Compliance Engineering:
  • Support SOC 2 compliance by helping establish continuous control monitoring, automated evidence collection, and processes that make security assurance part of everyday operations.
  • Collaborate with Sales, Solutions Engineering, and Customer Success to respond to customer security assessments and build reusable resources that streamline future requests.
  • Partner with Legal, Finance, IT, and other stakeholders to assess security risks, improve security policies and controls, and strengthen trust with enterprise customers.

Qualifications

• Hands-on experience assessing real-world systems, identifying security risks, determining defensible severity levels, and recommending practical controls that teams can implement.
• Ability to validate security findings, reproduce vulnerabilities, develop proof-of-concepts, and write code or automation when needed to demonstrate risks or improve security processes.
• Experience working hands-on in infrastructure, product, or application security within a product-focused organisation, with a strong understanding of how modern systems are designed and secured.
• Comfortable acting as an internal security consultant, advising teams, challenging technical decisions constructively, and influencing stakeholders without direct authority.
• Experience helping secure systems you don't directly own, translating security findings into actionable requirements and working with responsible teams to ensure effective remediation.
• Comfortable using LLM-assisted tooling and understand its limitations, security implications, and potential failure modes.
• Ability to explain complex security risks, document technical findings, and provide practical guidance that engineers and non-technical stakeholders can confidently act on.

Requirements

• Deep expertise in at least two of the following areas:
  • Application Security: Developed security checks, engineering guardrails, tooling, or guidance that helps product teams build and ship secure software.
  • Platform Security: Experience securing a major cloud provider and Kubernetes environments, including areas such as sandboxing, multi-tenancy, or identity.
  • Corporate Security: Worked on identity and access management, endpoint security, employee access lifecycles, or data access controls across corporate environments.
  • Security Monitoring: Implemented logging, protective monitoring, or security detection capabilities that support effective investigation and incident response.
  • Security Assurance & Compliance: Supported SOC 2 or ISO 27001 from an engineering perspective, including implementing technical controls or automating compliance evidence collection.

Benefits

• Competitive compensation – We offer fair and attractive pay.
• Ownership – Our core value is to “empower others,” and we mean it—you’ll get a slice of n8n with equity.
• Work/life balance – We work hard but ensure you have time to recharge:
  • Europe: 30 days of vacation, plus public holidays wherever you are.
  • US: 20 vacation days, 8 sick days, plus public holidays wherever you are.
• Health & wellness:
  • Europe: We provide benefits according to local country norms.
  • US: Multiple low-premium, low-deductible medical plans with coverage for individuals and families—plus a no-cost premium HDHP option with a pre-seeded HSA—along with dental and vision coverage.
• Future planning:
  • Europe: We provide pension contributions according to local country norms.
  • US: 401(k) retirement plan with a 4% employer match.
• Financial security:
  • Europe: We provide benefits according to local country norms.
  • US: Company-paid short-term and long-term disability insurance, plus life insurance to support you and your loved ones.
• Career growth – We hire rising stars who grow with us! You’ll get €1K (or equivalent) per year to spend on courses, books, events, or coaching to level up your skills.
• A passionate team – We love our product, and we prove it with regular hackathons where we see who can build the coolest thing with it!
• Remote-first – Our team works remotely across Europe, with regular off-sites for team bonding. Some roles, like sales in the US, are hybrid—please check the job description.
• Giving back – We're big fans of open source, and you'll get $100 per month to support projects you care about.
• Transparency – We all know what everyone’s working on, how the company is doing—the whole shebang.