Product Security Engineer

Overview

Product Security Engineer (also framed as Product Cybersecurity Engineer) focused on engineering and maintaining product security tooling and supporting the Product Security team.

What you'll do

• Design, engineer, and ensure implementation of security tools across the product lifecycle (e.g., threat model, SAST, DAST, SCA)
• Run security scans including SAST, DAST, and software composition analysis
• Support creation of Software Bill of Materials (SBOMs)
• Lead strategy and maintenance of cybersecurity tools for multiple technologies, devices, accessories, connected infrastructure, and applications
• Lead execution and integration of cybersecurity testing and assessment across the development lifecycle
• Provide vulnerability response support by evaluating vulnerabilities and communicating risks and mitigation strategies
• Provide technical leadership in creating comprehensive threat models using industry-standard methods

What you'll need

• Minimum 4+ years of hands-on cybersecurity experience
• Education: Bachelor’s (or equivalent) or a Master’s in Computer Science or Information Technology
• Current CISM, CISSP, CRISC, or similar certification preferred
• Strong understanding of mitigating security controls including vulnerability management, penetration testing, and code security
• Knowledge of cybersecurity frameworks/standards such as HIPAA, FDA, ISO 27001/2, NIST CSF, and OWASP
• Understanding of network infrastructure (firewalls, web proxy and/or email architecture) as a mitigating control
• Ability to communicate, collaborate, and manage/prioritize multiple tasks

Details

• Working from office for 2 days (Hybrid) in Kharadi, Pune
• UK shift timings: 12:30 PM to 9:30 PM IST