Wait…
The role
You'll be one of Talon.One's first two security engineering hires, owning the security of everything we ship to our customers and third-party partners, from API authorization to the AI features going into our platform and their real-time observability and detections. You'll work hands-on, pairing directly with engineers and product managers rather than filing tickets, across a multi-tenant platform that powers promotions and loyalty for some of Europe's largest retail and travel brands. Based in Berlin, hybrid.
What you need
- Experience with shipping production code, whether you come from software engineering or from security work that includes coding
Experience with a multi-tenant SaaS platform's authorization and tenant isolation model, and strong knowledge of how to test for broken object-level authorization automaticallyDesign API security end-to-end: authentication, credential lifecycle, rate limiting, abuse resistance and webhook securityHands-on experience with threat-modelling methodologies such as STRIDE, translating identified threats into actionable engineering requirements and security testsPractical experience implementing and tuning SAST and DAST tools in CI/CD workflows, with a focus on useful developer feedback and effective vulnerability remediationUnderstanding how AI features actually get built, retrieval, context assembly, tool calling, agent loops, and know where indirect prompt injection breaks multi-tenant isolationHands-on experience with Google Cloud security, Kubernetes, and tools like Wiz and DatadogKnow how to build security monitoring and detections in-house tools (SIEM) yourself, from designing the signal through tuning it and writing the runbookStrong knowledge of OWASP security guidance, including the OWASP Top 10, API Security Top 10, and Top 10 for Large Language Model ApplicationsAbility to influence engineers who don't report to you, and feel comfortable being early in a function with no existing playbookOnce you are here you will
- Threat-model new product features before they're built, including AI-embedded ones, and turn what you find into real engineering work
- Own tenant isolation and API security across our Rule Engine, Integration API, Management API, CAMA, UCP Predict features, Talon.One MCP and third-party integrations
- Act as the security design authority for our AI features, working closely with the team behind UCP and Predict
- Build automated cross-tenant and adversarial testing that runs in CI, so isolation gets checked on every build, not only during our external yearly Pentest iterations
- Build standard, frictionless and automated golden paths for code security checks in CI workflows that developers can adopt by default without slowing down delivery
- Run vulnerability and coordinate efficient patch response across every squad outside Platform, from automated dependency updates to drilled emergency response
- Build and own application and AI security monitoring with our observability tools and build real-time security detection rules and alerts, and security events runbooks
- Design the security of the API integration between Talon.One and Adyen as our products come together
- Run a security champions programme so all our tribes build real security capability, not just the security team
- Experiment with AI, leverage innovative ways and build new workflows to identify, prioritize, and remediate product security risks at scale.
Pay and benefits
- A product & engineering team, now part of Adyen, building the incentives engine behind some of the world’s biggest brands
- Adyen+, a significant monthly allowance to spend on whatever matters most to you and your wellbeing
- 28 days of paid annual leave
- €115 monthly commuting allowance when you join us in the office 3 days per week
- 25% employer contribution to your pension
- Annual all-company gathering at Adyen’s headquarters in Amsterdam, plus regional team events throughout the year
- Opportunity to connect in person at Adyen offices across 29 locations worldwide
About Talon.One
Talon.One, an Adyen company, is the most powerful incentives engine that unifies loyalty, personalized promotions and offer management into a single platform. Built for enterprise scale and security, Talon.One helps businesses design and deliver incentives that drive real customer behavior.
Today, over 300 of the world’s most-loved brands including Sephora, Gymshark and Costa Coffee work with Talon.One to turn their incentives into a reliable growth engine.
Similar jobs at other companies

Pay not posted
Posted Aug 21, 2026

Pay not posted
Posted Oct 5, 2026

Pay not posted
Posted Jun 29, 2026
- S
Pay not posted
Posted May 20, 2026
- OA
Pay not posted
Posted Jun 20, 2026
- S
StackAIPoland - Warsaw Office
PLN 260K–PLN 350K / yr
Posted Jun 30, 2026
Source: the Talon.One Greenhouse job board. We last checked this job 2 h ago. We first saw it 5 days ago. A job on a job board does not always mean that the team interviews people now. We found this job board in a public list. We did not yet compare it with the careers page of the company.
- Open tech jobs
- 15
- With posted pay
- 7%