search Browse Jobs
Senior Product Security EngineerCollibra · Netherlands
Collibra logo

Collibra

company page ↗

Senior Product Security Engineer

🗓️ Posted 2026-09-01 Netherlands Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 6,500 EUR–9,500 EUR/mo

About the Company

The enterprise standard for AI context and control Collibra is the enterprise AI control plane. Built over eighteen years of ontology engineering, it governs context and control across any data, any model, any agent - for AI leaders who need certainty at the speed of AI. A 5x Forrester Wave Leader and 2x Gartner Magic Quadrant Leader, Collibra serves more than 700 customers - including 78 of the Fortune 500 - and governs more than 2 billion assets. Headquartered in New York City and Brussels, our co-founders Felix Van de Maele and Stijn Christiaens had a vision to help organizations maximize the value of their data and AI programs. Today, Collibra is making that vision a reality. Software Development Specialties: data governance, enterprise software, data stewardship, semantic technology, Information Governance, information stewardship, data catalog, data platform, data intelligence, data privacy, AI governance, artificial intelligence, data lineage, data quality and observability

Responsibilities

  • ● Joining Collibra's Product Security team Collibra is seeking a Senior Product Security Engineer to join our high-impact team. You will be a key individual responsible for identifying vulnerabilities and providing expert remediation consulting for our global product development teams. This role provides critical technical leadership and oversight, ensuring Collibra continues to deliver secure, resilient products and services to our customers. You will act as an application security evangelist, partnering with engineers to accelerate secure time-to-value while leveraging cutting-edge AI and MCP to create context-aware security automation. Product Security Engineers at Collibra are responsible for
  • ● Application Penetration Testing (Web-app, API,Thick Client)
  • ● Network Penetration Testing (Internal, External)
  • ● Cloud Service penetration testing tradecraft and methodologies across multiple service providers (AWS, Azure, GCP)
  • ● Threat Modeling
  • ● Source-Code Reviews
  • ● Ensure quality reports and services are delivered efficiently and on time
  • ● Collaborate with cross-functional teams to ensure that security best practices are integrated into the development process
  • ● Enable remediation of discovered vulnerabilities through the building of relationships with engineering teams
  • ● Continue to develop professional skills with relevant industry specific certifications or training
  • ● Assist with triaging Code Security findings identified by SAST, SCA, IAST, DAST, where necessary.
  • ● Leverage AI and MCP to create intelligent, context-aware security guidance and automation. You have
  • ● + years of relevant Penetration Testing, Product Security, and Application Security experience.
  • ● + years securing Java, Python, and/or JavaScript web applications.
  • ● Familiarity with Open-Source Security Testing Methodology Manual (OSSTMM), Open Web Application Security Project (OWASP), Software Assurance Maturity Model (SAMM), National Institute of Standards and Technology (NIST) Special Publications, and PTES (Penetration Testing Execution Standard).
  • ● Strong working knowledge of at least two programming or scripting languages.
  • ● Familiarity with best practices for securing the SDLC and DevOps processes.
  • ● Ability to triage security incidents when needed.
  • ● Understanding of AI privacy and governance in developer workflows.
  • ● Demonstrated proficiency in leveraging AI tools (e.g., Claude, Gemini, ChatGPT, Copilot) to solve real-world business challenges, drive measurable outcomes, or streamline workflows.