Job description
Company Description
Scalable Capital is a leading digital investment platform in Europe. The company empowers everyone to shape their financial future. Scalable Broker makes it easy and affordable for clients to invest professionally in stocks, ETFs and other exchange-traded products and set up savings plans. Scalable Wealth, the digital wealth management service, offers clients professional investment in ETF portfolios and is also adopted as a white-label solution by renowned B2B partners. With the European Investor Exchange (EIX) Scalable Capital offers a stock exchange for retail investors in Europe. Over 27 billion euro is held on the platform by more than one million clients.
Scalable Capital was founded in 2014 and employs more than 500 people at its offices in Munich, Berlin, Vienna, and London. Together with the founding and management team around Erik Podzuweit and Florian Prucker, they are working on a new generation of financial services.
Visit our finance blog or check out our Social Media channels to find out what our Expert Teams have to say.
Our Company Values guide us every day in how we work and collaborate. To learn more about them, you can find our values here (English).
Job Description
We are looking for an experienced security leader to build and drive our Product Security program. As Product Security Manager you will shape the secure-by-design strategy for all customer-facing products and services, oversee architecture reviews and penetration testing, and partner closely with engineering and DevOps to embed security controls throughout the development life-cycle. You will own roadmap planning, people development, and cross-functional communication.
Key responsibilities
Define and execute the product-security roadmap covering design reviews, threat modelling, penetration tests, secure-coding standards, and testing automation
Lead and mentor a multidisciplinary team of security experts
Conduct risk assessments and threat modelling workshops
Establish and maintain product-security playbooks, review checklists, and engagement models for engineering squads
Coordinate and track vulnerability remediation, providing clear risk and status updates to product, engineering, and executive leadership
Serve as single point of contact for product squads, ensuring timely security reviews and pragmatic guidance.
Champion a security champion network, organising workshops and sharing best‑practice playbooks to embed security‑by‑design throughout the SDLC
Ensure product security processes align with relevant regulations and industry frameworks
Qualifications
6+ years of application or product-security experience, with 2+ years leading teams
Proven track-record establishing secure development life-cycle practices, threat-modelling, penetration testing and vulnerability-management workflows
Solid understanding of modern cloud and application architectures, CI/CD pipelines, and offensive-security testing techniques
Hands‑on experience in code review, threat modelling, and penetration testing.
Strong leadership, project‑management, and stakeholder‑communication skills
Excellent written and verbal communication skills, capable of conveying risk to technical and non-technical audiences
Familiarity with common threat‑modelling frameworks, secure‑coding standards, and industry compliance requirements
Relevant credentials (CISSP, CSSLP, OSWE/OSCP, or comparable) are advantageous
Additional Information
- Be part of one of the fastest-growing and most visible Fintech startups in Europe, creating innovative services that have a substantial impact on the lives of our customers
- Work with an international, diverse, inclusive, and ever-growing team that loves creating the best products for our clients
- Work from our centrally located offices in the heart of Munich or Berlin, nestled in lively neighborhoods filled with vibrant restaurants, cozy cafés, and a wide range of convenient amenities or choose to work remotely within Germany (if eligible for the job)
- Be productive with the latest hardware and tools
- Learn and grow by joining our in-house knowledge sharing sessions and spending your individual Education Budget
- Learn and experience German culture first hand by joining our free German language classes
- (International) relocation support
- Flexible vacation policy and the opportunity to work from abroad
- Benefit from an attractive compensation package and from the company pension scheme
- Monthly contribution of 25% for the ‘Deutschland Jobticket’
- Say goodbye to order commissions and say hello to your complimentary subscription of Scalable Capital’s PRIME+ Broker