Senior Product Security Engineer

Overview

Senior Product Security Engineer building agent-based security capabilities. You will design, run, and red-team security agents and own core application, data, and CI/CD security responsibilities.

What you'll do

• Build and run security agents on the Claude Agent SDK with MCP tool integrations.
• Wrap and unify scanners into a coherent, low-noise signal.
• Evaluate and red-team your own agents, including false negatives and prompt injection.
• Secure high-risk features by threat modeling before code exists.
• Own SAST, secret scanning, dependency, and supply-chain security in CI with SLAs.
• Run vulnerability assessment in-house (DAST, API security testing, and penetration testing).
• Implement data protections for PII, including masking/redaction and least-privilege access with audit trails.

What you'll need

• 5–8 years in security, with the majority in application or product security.
• Production coding experience in Python, Go, or TypeScript, and comfort with Shell.
• Hands-on application security experience (secure code review, threat modeling, OWASP Top 10/API Top 10, CVE/OSV-driven dependency and supply-chain security).
• Practical cloud security experience on AWS (IAM, network boundaries, and use of GuardDuty/Security Hub/CloudTrail).
• Security integrated into CI/CD (SAST, SCA, and secret scanning pipelines you’ve owned).
• Daily practical use of AI coding agents such as Claude Code.
• Working fluency in English.

Details

• Location: Bangalore.