Digital Technology Specialist - Product Security

Overview

Product Security Engineer role responsible for identifying and mitigating security risks across the Software Development Lifecycle, partnering with engineering teams to build secure-by-design products and advancing security practices for AI-assisted software development.

What you'll do

• Perform penetration testing and application vulnerability assessments on web, API, cloud, and containerized applications.
• Identify, validate, prioritize, and communicate security vulnerabilities to development teams.
• Conduct threat modelling and security design reviews for new products and features.
• Drive remediation efforts and provide secure coding guidance to engineering teams.
• Embed security controls throughout the Software Development Lifecycle (SDLC).
• Partner with developers, architects, and DevOps teams to implement security by design.
• Integrate and optimize security tooling within CI/CD pipelines.
• Support security automation and policy-as-code initiatives.
• Execute and interpret results from SAST, DAST, Software Composition Analysis (OSS/SCA), container security scanning, secret detection and code scanning.
• Triage findings, reduce false positives, and drive risk-based remediation.
• Assess security risks introduced by AI-assisted development and AI-enabled applications.
• Support implementation of AI Secure SDLC (AI-SSDLC) practices.
• Evaluate AI-generated code for security weaknesses and unsafe design patterns.
• Contribute to AI threat modelling, agent security, prompt security, and secure AI development guardrails.
• Stay current on emerging risks related to LLMs, AI agents, model abuse, and AI supply chain security.
• Deliver security coaching, training, and awareness sessions for development teams.
• Create actionable security guidance, standards, and best practices.
• Champion a security-first culture across product engineering teams.

What you'll need

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or related field.
• 5-8 years of experience in Application Security, Product Security, Penetration Testing, or Secure Software Engineering.
• Strong understanding of modern software development practices and SDLC.
• Experience performing manual and automated penetration testing.
• Experience securing cloud-native and containerized applications.
• Strong programming or scripting skills in one or more languages such as Python, Java, JavaScript, C#, Go, or C++.
• Deep understanding of common vulnerabilities including OWASP Top 10 and API security risks.
• Security testing tools: SAST (Checkmarx, Coverity, Fortify, Veracode, CodeQL), DAST (Burp Suite, AppScan, Veracode, OWASP ZAP), OSS/SCA (Black Duck, Mend, Snyk, Dependency-Check), container security (Prisma Cloud, Wiz, Aqua, Trivy).
• Cloud and DevSecOps: GitHub, GitLab, Azure DevOps, Jenkins, CI/CD security controls, Kubernetes and container platforms, Infrastructure as Code security.
• AI security: AI Secure SDLC, LLM and Agent security concepts, prompt injection and model misuse risks, secure AI application development, AI supply chain security and model governance.

Details

• Location: Bangalore, Karnataka, India (Neon Building West Tower).
• Flexible working patterns: working remotely from home or any other office location, provided you visit the office when needed; flexible hours.