Own software security within the cyber engineering team, testing applications, reviewing code, validating vulnerabilities, and making sure the right security tools and processes are in place.
Compensation
$140,000—$170,000 USD
Responsibilities
Own software security within the cyber engineering team, providing technical guidance on securing applications, APIs, and back-end services.
Perform security testing of applications and validate that fixes resolve identified findings.
Review source code against secure coding standards to identify vulnerabilities, insecure design, and exploitable weaknesses.
Implement, tune, and maintain software security tools (SAST, DAST, dependency and container scanning) and integrate them into development and release processes.
Evaluate open-source and commercial cyber tools and source code to determine fit, security risk, and what can be adapted to meet mission requirements.
We are looking for a Product Security Engineer with hands‑on experience in product/application security, vulnerability assessment, threat modeling, and secure software development practices.
Responsibilities
Perform security assessments and vulnerability analysis for software‑based products.
Analyse vulnerabilities for exploitability, attack prerequisites, security impact, and remediation.
Review security findings from static analysis, vulnerability scanning, penetration testing, and open‑source component analysis.
Perform threat modeling based on product architecture, data flows, interfaces, assets, and trust boundaries.
Identify security threats, attack scenarios, risks, and appropriate security controls and mitigations.
Lead application security architect responsible for securing software across enterprise and manufacturing applications, setting standards, leading threat modeling, secure design, code review, and AI‑assisted tooling.
Responsibilities
Own the application‑security strategy, standards, and roadmap
Establish and scale a Security Champions program
Lead threat modeling, secure design/architecture reviews, code review, and security testing (SAST, DAST, SCA, penetration testing)
Build secure build and secure deployment gates
Establish baseline security posture for applications and components
Requirements
BE/ME in computer science, electronics, or a related technical field — or equivalent experience
Designs, develops, and optimizes advanced technical and cybersecurity capabilities for threat modeling and implements sophisticated cybersecurity solutions.
Designs, develops, and optimizes advanced technical and cybersecurity capabilities for threat modeling and implements sophisticated cybersecurity solutions.
The Product Security Engineer strengthens Hitachi Vantara's product security across the Software Development Lifecycle (SDLC), driving vulnerability management, security assessments, remediation, Secure SDLC, and DevSecOps initiatives in collaboration with Engineering, Product, Cloud Operations, Support, and Security teams.
Responsibilities
Develop understanding of product architecture, technology stacks, APIs, integrations, and deployment models; act as the primary security contact for Engineering, Product, and Support teams.
Identify product security risks and support security assessments and customer escalations.
Perform vulnerability triage, reproduction, validation, and risk assessment using CVSS, exploitability, and business/customer impact.
Lead vulnerability identification, prioritization, remediation, and reporting across SAST, DAST, SCA, penetration tests, bug bounty programs, and customer-reported issues.
Establish remediation SLAs, track findings to closure, validate fixes, and drive root cause analysis and corrective actions.
The Product Security Engineer strengthens Hitachi Vantara's product security across the Software Development Lifecycle (SDLC), driving vulnerability management, security assessments, remediation, Secure SDLC, and DevSecOps initiatives in collaboration with Engineering, Product, Cloud Operations, Support, and Security teams.
Responsibilities
Develop understanding of product architecture, technology stacks, APIs, integrations, and deployment models; act as the primary security contact for Engineering, Product, and Support teams.
Identify product security risks and support security assessments and customer escalations.
Perform vulnerability triage, reproduction, validation, and risk assessment using CVSS, exploitability, and business/customer impact.
Lead vulnerability identification, prioritization, remediation, and reporting across SAST, DAST, SCA, penetration tests, bug bounty programs, and customer-reported issues.
Establish remediation SLAs, track findings to closure, validate fixes, and drive root cause analysis and corrective actions.
Seeking a hands-on DevSecOps SME / Senior DevSecOps Engineer to drive the end-to-end design, implementation, and roll-out of application security scanning standards across enterprise engineering pipelines.
Responsibilities
Lead the end-to-end configuration, deployment, and integration of code scanning platforms (e.g., Checkmarx, SonarQube, Veracode, Snyk, Fortify, or OWASP ZAP) across enterprise repositories.
Establish baseline rulesets, policy standards, and enforcement mechanisms for Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST).
Embed automated security testing stages, quality gates, and failure conditions seamlessly into modern CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Azure DevOps, Jenkins).
Define the operational scope of security scanning, establish false-positive triage workflows, and optimize rulesets to minimize developer friction while maintaining high security coverage.
Work directly with software engineering squads to provide guided remediation, establish secure coding standards, and build developer-first security
Product Security Engineer - 1CNewQuest Global · Bengaluru, India
ARCHITECT, MTS_TLonsemi · Bangalore, India
Lead Security Engineer - Threat ModelingTruist Bank · Charlotte, US+5 more
Associate Product Security EngTrane Technologies · Bangalore, India