Staff Product Security Engineer

Overview

As a Staff Product Security Engineer, you represent Security/Privacy needs across product design and development for Patient Care Solutions, ensuring secure delivery to customers.

What you'll do

• Capture security/privacy requirements and consult development teams to ensure compliance and secure product testing.
• Lead threat modeling sessions and use threat models to define security controls.
• Own the Cybersecurity Management Plan for identifying, assessing, reporting, and mitigating product vulnerabilities.
• Generate and maintain the Software Bill of Materials (SBOM) and assess integrated components and SBOMs.
• Scope and participate in penetration tests, vulnerability scanning, and security risk assessments including remediation planning and closure.
• Create Design Engineering Privacy and Security (DEPS) artifacts throughout the product lifecycle.

What you'll need

• 6+ years of product or systems experience.
• At least 5 years of application security experience.
• Bachelor’s Degree in a relevant field (e.g., Computer Engineering, Computer Science, Information Security) or STEM (Science, Technology, Engineering, Math).
• Working knowledge of regulatory/compliance frameworks such as NIST CSF/800-53, ISO27001, SOC2, HIPAA, HITRUST, and GDPR.
• Understanding of secure coding principles including OWASP Top Ten.
• Demonstrated technical leadership on a product development team.
• Effective oral and written communication skills.

Details

• Location: Bengaluru.
• Relocation assistance: No.