Senior Engineer, Product Security Testing

Overview

Senior Engineer, Product Security Testing for the Product Security team in Bangalore. The role performs penetration testing across web, mobile, APIs, wireless, and social engineering, and analyzes results to produce security reports and recommendations.

What you'll do

• Perform penetration testing across internet, intranet, wireless, web applications, APIs, mobile applications, and social engineering.
• Analyze penetration testing results and produce reports covering findings, exploitation procedures, risks, and recommendations.
• Execute penetration testing projects using established methodology, tools, and rules of engagement.
• Conduct security assessments of AI models, LLM-powered applications, chatbots, AI agents, and AI-integrated APIs.
• Review application code for security vulnerabilities and risky security/privacy practices.
• Perform threat modeling and risk analysis, and develop mitigation plans.

What you'll need

• Minimum 6 years of experience in Product and Application Security, including penetration testing on web applications, mobile (Android and iOS), APIs, SAST, SCA, and SSDLC.
• 1-2 years of software development with at least 1 year developing secure systems.
• Experience with OWASP Web and Mobile Top 10, NIST CSF, NIST SP 800, and PCI DSS, including mitigation of common threats.
• Hands-on experience with web and mobile security tools including code scanners (Checkmarx, Fortify, Ghidra, Hopper, MobSF) and dynamic analysis tools (Burp Suite, ZAP).
• Experience with security testing for AI/LLM systems, including prompt engineering and adversarial testing techniques.
• Experience calculating CVSS ratings for identified vulnerabilities using severity rating systems.

Details

• Location: Bangalore, Karnataka, India.