Principal Security Engineer

commercetools

ABOUT COMMERCETOOLS Real innovation starts with a strong foundation, and at commercetools, that comes from the perfect balance of our product and our people. Behind every leap forward is a collective of builders, explorers, doers, makers, and problem-solvers. The kind of people who not only pioneered a more flexible approach to commerce architecture but also shaped the culture of experimentation that approach unlocked. Together they are the engine of commerce innovation today. At commercetools, we power the next era of commerce for our customers. Whether it’s AI-driven solutions that help enterprises make smarter business decisions, bridging digital and physical shopping experiences, or enabling entirely new ways for industries to connect with their customers, we help the world’s most ambitious companies experiment, scale, and grow without limits. Here the best idea wins, not the loudest voice. You will have the tools, trust, and space to not only build the future of commerce, but to build your own. YOUR IMPACT As our Principal Engineer Product Security , you’ll support the Engineering team by solving challenging technical problems for an ambitious product and enabling teams to "shift left" to build secure services on multi-cloud infrastructure.   You will: * Formulate, evangelise, and drive adoption of the product security strategy  * Assess, advise on, and increase the security maturity posture  * Create a standardised security architecture and operational best practices  * Help track and drive remediation of security and technology risks  * Educate product teams on risk assessments, threat modelling, and building secure api-first applications  * Review requirements and designs to help product teams address shortcomings  * Embed security tooling into the development process  * Contribute to the review of external penetration tests and help teams prioritise fixes  * Collaborate with product teams to improve overall security and resolve specific issues  * Facilitate or lead customer conversations regarding product security  * Triage and investigate new attack vectors to determine risk mitigation  * Drive security and quality initiatives across the organization and support certification audits  * Collaborate with Product Management, Principal Engineers, and legal/compliance teams  * Identify skills gaps and facilitate knowledge sharing across the organization    This role is hybrid, with three days a week spent in our Berlin, London or Valencia office.   WHAT SETS YOU APART You're a creative problem-solver who is wired to find solutions. You confidently dive into complex challenges and have a talent for making them simple for others. Your curiosity drives you to constantly grow and contribute to an environment of trust and teamwork. Great ideas come from many paths, and your unique perspective matters more than checking every box. What matters most is the mindset you bring to the work. You bring: * A strong technical background and 5+ years of proven track record in hands-on Product Security  * 2+ years of experience improving Product Security in a leadership role  * Experience with customer-facing security roles and influencing roadmaps in matrix organizations  * Experience in a scale-up environment with ambitious and competing priorities  * Expertise in formulating, elaborating, and clarifying requirements or priorities  * Experience with Secure Architecture design reviews and Threat Modeling  * Experience infusing security into various levels of the SDLC  * Experience with Static Analysis and Secure Code Review implementations  * Sound knowledge of Linux systems, Kubernetes, Terraform, Vault, API, and web application security  * Practical experience in DevSecOps and proficiency in at least one scripting language like JavaScript or Go  * Project management experience for projects affecting multiple teams  * Experience working within an Agile environment with a strong customer focus  * Experience setting up and running trainings or onboardings  * Clear written and verbal communication in fluent English    AI Aptitude: A genuine curiosity for using AI tools to work smarter and more effectively, paired with a drive to learn and put them into practice in your role. Nice to Have: * Security Certifications such as CISSP, CCSP, Certified Kubernetes Security Specialist, or GCP/AWS/Azure security certifications  * An eagerness to constantly improve and learn about leadership and new technologies    OUR BENEFITS Because work and life are connected, our benefits are too. We’ve designed them to give you the security, flexibility, and opportunities you need to focus on what matters most. 🩺 Comprehensive health benefits for you and your dependents, including access to OpenUp for personalized mental health support 📚 Learning and development opportunities including an annual learning budget, access to self-paced learning platforms and language training, personalized coaching, mentorship, and leadership programs 🍼 Family Leave Plus gives you additional fully paid weeks of parental leave on top of government-provided leave, so you can spend more time with your new addition 📈 Our equity participation program allows you to share in our success  For more information on our benefits, visit this page.   Come as you are. Build with us. Your unique perspective is essential to our success. We are committed to building a team that reflects the world around us because we know it’s the only way to build the future. We celebrate our differences and have created a hiring process that’s fair, inclusive, and designed to let your talent shine. We proudly welcome applicants of every race, color, religion, gender identity, sexual orientation, age, and any other part of your identity that makes you who you are. As an equal opportunity employer, we believe that our strength lies in our diversity, and we invite you to be a part of our global community.  For more information on our diversity, equity, inclusion, and belonging practices, visit this page.

Parloa

ABOUT PARLOA Parloa’s mission is to make every customer conversation feel effortless for both customers and the companies serving them. As agentic AI accelerates, Parloans are shaping the foundation of a new era in customer experience, one where customer support is no longer transactions, but meaningful exchanges. It is not just a vision; Parloa has powered over ONE BILLION interactions between global enterprise brands and their customers, with companies like Booking.com, HealthEquity, Allianz, SAP, BarmeniaGothaer, and TUI already deploying Parloa at scale. ABOUT THE ROLE: Voice is one of the most demanding and differentiated parts of what we do. As Principal Software Engineer for Voice/VoIP, you'll own the technical direction of our real-time voice infrastructure — the systems that let AI agents have natural, low-latency phone conversations at enterprise scale, across telephony providers, carriers, and global markets. This is a hands-on technical leadership role. You'll set architectural direction, solve the hardest problems yourself, and raise the bar for how the wider engineering org builds and reasons about voice systems. You'll work closely with infrastructure, AI/ML, and product teams to ensure our voice stack is fast, reliable, and ready to scale globally. AREAS OF OWNERSHIP: * Own the architecture and technical roadmap for Parloa's Voice/VoIP infrastructure, including SIP trunking, media handling, and real-time audio pipelines * Design for low-latency, high-availability voice at enterprise scale — across global telephony carriers and providers * Drive technical decisions on protocols and standards (SIP, SDP, RTP/SRTP, RTCP, WebRTC, ICE, STUN/TURN) and real-time media transport * Partner with AI/ML teams to optimise the integration between voice infrastructure and conversational AI models (ASR, TTS, turn-taking, barge-in) * Diagnose and resolve deep, systemic issues in call quality, latency, jitter, and packet loss across distributed, multi-region deployments * Define and uphold engineering standards for reliability, observability, and security across the voice stack * Mentor senior and staff engineers, acting as a technical multiplier across the organisation * Evaluate and integrate with telephony providers, carriers, and SIP trunk vendors as Parloa expands into new markets * Represent Parloa's technical voice expertise in conversations with enterprise customers and partners where needed WHO YOU ARE: * 10+ years of engineering experience, including 5+ years hands-on building, operating, or debugging production Voice/VoIP, SIP, WebRTC, or carrier-grade voice infrastructure * Strong knowledge of SIP, SDP, RTP/SRTP, RTCP, WebRTC, ICE, and real-time media transport protocols * Hands-on understanding of audio codecs and media behavior, including Opus, G.711/G.722, codec negotiation/transcoding, DTMF/RFC2833, jitter buffers, packetization, and codec-related quality/latency trade-offs * Experience building or operating large-scale, distributed, real-time systems with strict latency and availability requirements * A track record of owning architecture for complex systems and driving technical decisions with broad organisational impact * Experience working with telephony carriers, SIP trunk providers, or PSTN integrations at scale * Deep, hands-on ownership of production SIP-based voice infrastructure at enterprise scale (e.g. Kamailio, FreeSWITCH, Asterisk, pjsip) * Strong systems programming skills in one or more of Go, C, C++ or Rust, with the ability to work at the media/transport layer. * Comfort operating in cloud environments (AWS, GCP, or Azure) and with container orchestration (Kubernetes) * Excellent communication skills — able to explain complex technical trade-offs to engineers and non-engineers alike * A genuine interest in AI and conversational technology, and how voice infrastructure underpins it * Experience instrumenting and operating voice-quality observability — call-quality metrics (e.g. MOS), per-leg call tracing, and diagnosing jitter, latency, and packet loss from telemetry OUR ENGINEERING VALUES: At Parloa, we hire, promote, and evaluate based on cultural and technical excellence. You’ll thrive here if you: * Earn Trust – act with transparency and reliability. * Obsess Over Customers – always start with the customer problem. * Think Big – set bold goals and pursue them fearlessly. * Have Integrity – do the right thing, especially when it’s hard. * Disagree & Commit – debate with candor, align fast, and deliver. * Own It – take full responsibility for outcomes, not just tasks. * Dive Deep – master the details without losing sight of the big picture. * Bias for Action – move fast, decide quickly, iterate fearlessly. * Deliver Value – measure success by customer and business impact. * Insist on the Highest Standards – raise the bar continuously. * Go the Extra Mile – make the impossible possible. * Hire & Elevate the Best – raise the bar with every hire OUR RECRUITING PROCESS: Recruiter Call → Technical Peer Interview → 360° Tech Interview Loop → Bar Raiser WHY PARLOA? We’re at the beginning of a new era in customer experience, one where AI doesn’t just respond, but understands, reasons, and takes action. We’re building agentic AI that enterprises trust with their most important customer moments: complex questions, high volumes, real stakes. When millions of people reach out to a brand, those interactions aren’t just support tickets; they’re defining experiences. We’re here to raise the standard: making every conversation seamless, intelligent, and genuinely helpful. If you care about shaping how businesses and customers connect at scale—and want your work to matter in real, everyday moments—this is where you do it. At Parloa, ownership isn’t a buzzword; it means being accountable for outcomes, not just tasks. We operate in a category that’s evolving fast, where the bar is high, and the problems are complex. We hire people who think in solutions, communicate with clarity, and follow through. People who are comfortable making decisions, taking responsibility, and raising the standard for themselves and those around them. We’ve grown beyond the earliest startup phase, but we’ve kept the intensity: fast execution, direct feedback, and a strong expectation to contribute meaningfully from day one. Backed by leading global investors like General Catalyst, EQT Ventures, and Altimeter Capital, we’re scaling with a clear ambition: to become the global category leader in enterprise-grade conversational AI.   ---------------------------------------------------------------------------------------------------------------------------------- Parloa is committed to upholding the highest data protection standards for our clients' and employees' data. All our employees are instrumental in ensuring the utmost care, GDPR, and ISO compliance, including ISO 27001, in handling sensitive information. Parloa is an e-verify employer in the USA. Please click here to learn more. * We provide equal opportunities to all qualified applicants regardless race, gender, sexual orientation, age, religion, national origin, disability status, socioeconomic background and other characteristics.

Parloa

ABOUT PARLOA Parloa’s mission is to make every customer conversation feel effortless for both customers and the companies serving them. As agentic AI accelerates, Parloans are shaping the foundation of a new era in customer experience, one where customer support is no longer transactions, but meaningful exchanges. It is not just a vision; Parloa has powered over ONE BILLION interactions between global enterprise brands and their customers, with companies like Booking.com, HealthEquity, Allianz, SAP, BarmeniaGothaer, and TUI already deploying Parloa at scale.   Frontend engineers at Parloa primarily strengthen our central frontend platform—microfrontend architecture, Server-Driven UI library, and our shared design system—so product teams can ship agent management platform UI faster with clear ownership and fewer coordination dependencies. Some engineers are embedded in product teams for deeper, custom UI where platform patterns do not apply. ABOUT THE ROLE: * Define and drive technical strategy for the frontend platform: microfrontend architecture, Server-Driven UI library, design system, and developer experience for internal and product consumers. * Lead cross-team architecture so platform capabilities and product features integrate through clear contracts (APIs, UI boundaries, release and rollout patterns)—with enough full-stack depth (TypeScript/Node services, integration with backend teams) to own end-to-end platform outcomes, not only React surfaces. * Balance short-term velocity with long-term resilience, making smart trade-offs on complexity, cost, and scalability. * Remain hands-on on highest-leverage platform code, critical design reviews, and precedent-setting implementations. * Act as a force multiplier by mentoring Staff Engineers and influencing the careers of future Principal-level talent.  * Serve as a trusted advisor to leadership including advising on frontend capacity, standards, and hiring bar. * Set cultural standards for fearless iteration, bias for action, and pragmatic perfectionism—design for tomorrow, build for today. * Lead frontend alignment with the Architecture Office and drive org-wide frontend technical direction—including how the platform evolves, how embedded product UI stays compatible, and how we scale agent management platform UI without coordination tax. * Demonstrate org-level impact across microfrontend boundaries/versioning and independent deployability, Server-Driven UI library adoption decisions, and design-system governance (contribution model, migration strategy, and breaking-change management) with measurable improvements across multiple teams. OUR TECH STACK: * TypeScript, React, React Router, styled-components, TanStack Query, nanostores * Infrastructure: Micro-frontends with single-spa, Webpack, Turborepo, pnpm workspaces, GitHub Actions, Azure Blob Storage * Testing: Vitest, RTL, MSW, Playwright WHO YOU ARE: * Professional experience building and shipping production systems in fast-moving environments. * You take full ownership. When something matters, you drive it to completion and stand behind the outcome. * You have a strong bias for action. You move quickly, make informed decisions, and iterate based on real-world feedback. * You are comfortable operating in ambiguity and can turn fuzzy problems into shipped results. * You think in systems: scalability, reliability, performance, and security are part of your default design mindset. * You define success clearly and measure it; you care deeply about customer impact and business outcomes. * You hold a high craftsmanship bar: clean, secure, well-tested code is your baseline. * You give and receive candid feedback, and you elevate those around you through mentoring and technical leadership. * You balance pragmatism with ambition, building for today while designing for tomorrow. * You want to help build not just features, but one of Europe’s most respected engineering organizations. WHAT’S IN IT FOR YOU? * Join a diverse team of 40+ nationalities with flat hierarchies and a collaborative company culture. * Opportunity to build and scale your career at the intersection of customer-facing roles and engineering in a dynamic startup on its journey to become an international leader in SaaS platforms for Conversational AI. * Deutschland ticket, Urban Sports Club, Job Rad, Nilo Health, weekly sponsored office lunches * Competitive compensation and equity package. * Flexible working hours, 28 vacation days and workation opportunities. * Access to a training and development budget for continuous professional growth. * Regular team events, game nights, and other social activities. OUR VALUES At Parloa, we hire, promote, and evaluate based on cultural and technical excellence. You’ll thrive here if you: * Earn Trust – act with transparency and reliability. * Obsess Over Customers – always start with the customer problem. * Think Big – set bold goals and pursue them fearlessly. * Have Integrity – do the right thing, especially when it’s hard. * Disagree & Commit – debate with candor, align fast, and deliver. * Own It – take full responsibility for outcomes, not just tasks. * Dive Deep – master the details without losing sight of the big picture. * Bias for Action – move fast, decide quickly, iterate fearlessly. * Deliver Value – measure success by customer and business impact. * Insist on the Highest Standards – raise the bar continuously. * Go the Extra Mile – make the impossible possible. * Hire & Elevate the Best – raise the bar with every hire YOUR RECRUITING PROCESS AT PARLOA Recruiter Call → Technical Peer Interview → 360° Tech Interview Loop → Bar Raiser   WHY PARLOA?  Parloa is one of the fastest growing startups in the world of Generative AI and customer service. Parloa’s voice-first GenAI platform for contact centers is built on the best AI technology to automate customer service with natural-sounding conversations for outstanding experiences on all communication channels. Leveraging natural language processing (NLP) and machine learning, Parloa creates intelligent phone and chat solutions for businesses that turn contact centers into value centers by boosting customer service efficiency. The Parloa platform resolves the majority of customer queries quickly and automatically, allowing human agents to focus on complex issues and relationships. Parloa was founded in 2018 by Malte Kosub and Stefan Ostwald and today employs over 400+ people in Berlin, Munich, and New York. When you join Parloa, you become part of a dynamic and innovative team made up of over 34 nationalities that’s revolutionizing an entire industry. We’re passionate about growing together and creating opportunities for personal and professional development. With our recent $350 million Series D investment, we’re expanding globally and looking for talented individuals to join us on this exciting journey.   ---------------------------------------------------------------------------------------------------------------------------------- Parloa is committed to upholding the highest data protection standards for our clients' and employees' data. All our employees are instrumental in ensuring the utmost care, GDPR, and ISO compliance, including ISO 27001, in handling sensitive information. Parloa is an e-verify employer in the USA. Please click here to learn more. * We provide equal opportunities to all qualified applicants regardless race, gender, sexual orientation, age, religion, national origin, disability status, socioeconomic background and other characteristics.