Product Security Engineer

Overview

Product Security Engineer responsible for embedding security throughout the product lifecycle and supporting vulnerability response.

What you'll do

• Drive product security activities across the product development lifecycle, including design reviews, threat modelling, security testing, and release readiness.
• Execute product penetration testing, vulnerability validation, exploitability analysis, and remediation verification.
• Partner with engineering teams to identify, track, and remediate product security issues.
• Contribute to PSIRT operations via vulnerability intake, triage, impact analysis, coordination, and advisory preparation.
• Maintain and evolve product security guidelines, secure development practices, and security requirements.
• Manage and operate a product security lab environment, including systems, tools, test environments, networking, logging, and access controls.

What you'll need

• 3 to 5 years of experience in product security, application security, penetration testing, infrastructure security, lab operations, or a related technical security role.
• Apply penetration testing tools and techniques in a product or lab environment.
• Apply vulnerability assessment, exploit validation, and remediation verification practices.
• Use Linux systems administration, networking fundamentals, and security hardening techniques.
• Collaborate with product engineering teams to resolve security issues.
• Experience with PSIRT or vulnerability management processes.

Nice to have

• Exposure to third-party penetration testing coordination, evidence collection, and remediation follow-up.
• Experience supporting centralized logging, telemetry collection, or detection engineering activities.
• Background in maintaining customer-representative lab or test environments.

Details

• Location: Gurugram.