Principal Product Security Engineer

Overview

Principal Product Security Engineer focused on SBOM-driven vulnerability triage and remediation recommendations across products.

What you'll do

• Triaging vulnerabilities across all SBOMs regardless of severity.
• Generate SBOMs and ensure compliance with FDA requirements, including end-of-support and software level-of-support info.
• Continuously monitor, review, and triage newly identified vulnerabilities from SBOM monitoring.
• Own and automate SBOM generation.
• Analyze vulnerabilities and provide patching recommendations and remediation actions.
• Technically lead engineers working on product security and vulnerabilities, proposing solutions.

What you'll need

• 12 to 16 years of relevant experience in product security, threat modelling, threat analysis, and CVSS scoring.
• Bachelor’s degree in computer science software engineering or equivalent.
• Proficiency in Python or another scripting language.
• Experience developing Python scripts and automation utilities for vulnerability management workflows.
• Experience in vulnerability management.
• Experience working in a regulated industry.
• Familiarity with SBOM management tools such as Dependency-Track.

Details

• Location: Nanakramguda, Hyderabad, India.