Senior Security Engineer (Product Security) at Gallup, Inc-Usa

Berlin, , Germany -

Full Time

Start Date

Immediate

Expiry Date

22 Jun, 26

Salary

0.0

Posted On

24 Mar, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Penetration Testing, Web Application Security, Mobile Application Security, API Security, Secure Coding Guidance, Attacker Mindset, Risk Identification, Vulnerability Remediation, Python, JavaScript, C#, Java, Communication, Problem Solving, Adaptability

Industry

Business Consulting and Services

Description

Anticipate attacks, outsmart threats and safeguard innovation. Gallup is seeking a senior security engineer (product security) to help build and scale security into the core of our products. This role sits at the intersection of engineering and offensive security — ideal for someone who enjoys breaking things thoughtfully and then helping teams rebuild them stronger. You’ll bring an attacker’s mindset to uncover real-world risks across our applications and then partner directly with senior, staff engineers and engineering managers to turn those findings into durable, secure solutions. This is a high-impact role with the autonomy to shape how security is embedded across Gallup technology. What You’ll Do Perform penetration testing across web, mobile and API applications to identify and validate security vulnerabilities Partner with engineering teams to incorporate security into applications from the start through secure coding guidance. What Makes You Stand Out Clear communication: You turn complex risks into clear, actionable guidance. Self-starter mindset: You thrive working independently while knowing when to pull in others. Impactful speed: You move quickly without cutting corners, ensuring durable results. Adaptive focus: You stay effective across shifting priorities and varied demands. Calm under pressure: In urgent incidents, you bring clarity and steadiness. Persistence and precision: You solve tough security challenges with practical, scalable solutions. What You Need Bachelor’s degree in cybersecurity, information assurance, computer science or a related field required At least four years of experience in testing applications and contributing to improving their security required Demonstrated deep expertise in mobile, web and API penetration testing required Proven ability to partner with engineering teams to remediate vulnerabilities and improve secure development practices required Strong programming or scripting skills in at least one language (e.g., Python, JavaScript, C#, Java) required Participation in bug bounty programs or responsible disclosure is a plus Certifications such as OSCP, OSWE, GWAPT and GXPN are a plus A commitment to working on-site at Gallup’s Berlin office at least three days per week required About Gallup At Gallup, we change the world, one client at a time, through extraordinary analytics and advice on everything important facing humankind. Learn more about our work and life at Gallup. Gallup offers a robust benefits package that includes competitive pay, life and critical illness insurance, a pension, an employee stock ownership program, mass transit reimbursement, a JobRad bike leasing program, family-building benefits, an employee assistance program, and various reimbursements and activities that enhance our associates’ wellbeing. Gallup is an equal opportunity employer. Employment decisions are based on qualifications and business needs. We value diversity and are committed to an inclusive workplace. To review Gallup’s Privacy Statement, please click this link: https://www.gallup.com/privacy. This privacy policy is meant to help you understand what information we collect, why we collect it, and how you can update, manage and delete your information. Your application and the information you provide will be processed and stored in the United States. Agencies: We are not partnering with agencies for this role, nor will we accept unsolicited résumés or be responsible for any fees or expenses related to such unsolicited résumés and/or applicants. #LI-Hybrid #LI-TF1

How To Apply:

Incase you would like to apply to this job directly from the source, please click here

Responsibilities

The role involves performing penetration testing across web, mobile, and API applications to identify and validate security vulnerabilities. Additionally, the engineer will partner with engineering teams to integrate security from the start through secure coding guidance.