Senior Security Engineer - Product Security

Overview

Senior Security Engineer (Product Security) to lead secure software development practices by integrating security into the SDLC, assessing risk, and helping teams remediate vulnerabilities.

What you'll do

• Conduct product security risk assessments for mobile, web, API, and IoT applications.
• Perform and remediate SAST, DAST, and manual penetration testing findings.
• Simulate attacks and produce detailed vulnerability reports.
• Guide engineering teams on secure development practices, remediation strategies, and secure code reviews.
• Act as a liaison for CI/CD and DevSecOps integration of security testing.
• Automate security processes and integrate them into development pipelines.
• Provide secure coding training for development and engineering teams.

What you'll need

• Bachelor’s degree in computer science, information technology, or a related discipline.
• 6–8 years of product security domain experience.
• Strong expertise in OWASP Top 10 and CWE Top 25.
• Hands-on experience with SAST, DAST, container security, and manual penetration testing.
• Ability to interpret and write code in Python, JavaScript/TypeScript, Java, C# (.NET), and Apex.
• Knowledge of API security, IaC security, and secrets management.
• Experience integrating security into CI/CD pipelines and developer workflows.

Details

• Location: Bangalore, Karnataka, India.