Product Security Engineer 3

Overview

Security Engineer role focused on hands-on adversarial penetration testing and embedding security throughout the software development lifecycle.

What you'll do

• Perform penetration testing on AI/LLM systems, web apps, APIs, mobile apps, and cloud infrastructure.
• Identify and exploit vulnerabilities such as auth/authorization flaws, business logic issues, SSRF, deserialization, and chained attacks.
• Embed security controls into CI/CD pipelines using SAST, DAST, SCA, secrets scanning, and container/image scanning.
• Build and operate DevSecOps automation across AWS, Azure, and GCP using policy-as-code and IaC scanning.
• Develop custom automation tooling using Python, Go, or PowerShell for testing and validation.
• Deliver actionable reports and provide remediation mentorship to engineering and product teams.
• Manage penetration testing engagement lifecycle from prioritization to execution and delivery.

What you'll need

• 4-6 years of combined experience in penetration testing and DevSecOps with depth in both.
• Hands-on pentest experience across web apps, APIs, mobile, and cloud environments.
• Experience integrating SAST/DAST/SCA/secrets/container-image scanning into CI/CD in live production settings.
• Knowledge of AI/ML security and LLM vulnerabilities and timely engineering attacks.
• Strong familiarity with OWASP Top 10, OWASP API Top 10, and OWASP LLM Top 10.
• Programming/scripting in at least one of Python, Bash, PowerShell, Go, or JavaScript.
• Extensive background in cloud security (AWS, Azure, GCP) and containers (Docker, Kubernetes).

Details

• Location: Bangalore.