Principal Product Security Engineer

Overview

Principal Product Security Engineer who drives application security across the SDLC and leads secure integration governance for third-party AI/LLM services.

What you'll do

• Embed threat modeling and security architecture reviews early in the product development lifecycle.
• Select, integrate, and tune SAST, DAST, and SCA tools inside automation/CI/CD pipelines.
• Analyze security tool outputs, reduce false positives, and provide prioritized remediation guidance.
• Define, maintain, and evangelize secure coding practices (OWASP Top 10) and lead code reviews/mentorship.
• Define secure design patterns and governance for integrating third-party AI/LLM services.
• Establish input/output controls, prompt handling standards, and data classification guardrails for AI-enabled apps.
• Identify and mitigate AI-specific risks such as prompt injection and data leakage.

What you'll need

• 5-7+ years of experience in security engineering, application security, or product security.
• Configure, manage, and automate SAST/DAST/SCA tooling in automated enterprise deployment workflows.
• Deep expertise securing cloud-native environments (AWS, Azure, or GCP) and microservices/API-based integrations.
• Working knowledge of AI/ML enterprise consumer risks and experience securing integrations with major LLM providers.
• Security foundations in one of: CISSP, CCSP, AWS Certified Security - Specialty, AZ-500, or Google Professional Cloud Security Engineer.
• Strong software engineering foundation as a past software developer and/or security practitioner with a verifiable track record.

Nice to have

• Preferred: CAISP, CAISS, or AIGP advanced AI credentials.
• Preferred: Background working in regulated financial services or a tightly controlled compliance environment.

Details

• Location: Bengaluru (Office).