Product & AI Security Engineer

ABOUT THE ROLE: You'll be one of Talon.One's first two security engineering hires, owning the security of everything we ship to our customers and third-party partners, from API authorization to the AI features going into our platform and their real-time observability and detections. You'll work hands-on, pairing directly with engineers and product managers rather than filing tickets, across a multi-tenant platform that powers promotions and loyalty for some of Europe's largest retail and travel brands. Based in Berlin, hybrid. ONCE YOU ARE HERE YOU WILL: Threat-model new product features before they're built, including AI-embedded ones, and turn what you find into real engineering work Own tenant isolation and API security across our Rule Engine, Integration API, Management API, CAMA, UCP Predict features, Talon.One MCP and third-party integrations Act as the security design authority for our AI features, working closely with the team behind UCP and Predict Build automated cross-tenant and adversarial testing that runs in CI, so isolation gets checked on every build, not only during our external yearly Pentest iterations Build standard, frictionless and automated golden paths for code security checks in CI workflows that developers can adopt by default without slowing down delivery Run vulnerability and coordinate efficient patch response across every squad outside Platform, from automated dependency updates to drilled emergency response Build and own application and AI security monitoring with our observability tools and build real-time security detection rules and alerts, and security events runbooks Design the security of the API integration between Talon.One and Adyen as our products come together Run a security champions programme so all our tribes build real security capability, not just the security team Experiment with AI, leverage innovative ways and build new workflows to identify, prioritize, and remediate product security risks at scale. WHAT WE NEED YOU