Product Security Engineer II

Hiring Women Returner

Product Security Engineer II

Location - Bangalore (Hybrid)

Experience - 5-10 Years

Employment Type - Full-Time

Job Summary

We are looking for an experienced Product Security Engineer with expertise in application security, penetration testing, cloud security, threat modeling, and Secure SDLC practices. The ideal candidate should have hands-on experience securing modern cloud-native applications and distributed systems.

Key Responsibilities

• Conduct application and product security assessments.
• Perform vulnerability assessments and penetration testing.
• Drive threat modeling activities using STRIDE or similar methodologies.
• Review architecture and security designs.
• Execute manual web and API security testing.
• Integrate and optimize SAST, DAST, and SCA tools.
• Secure Kubernetes, containers, and cloud-native workloads.
• Collaborate with development teams to remediate vulnerabilities.
• Develop security automation using scripting and tooling.
• Conduct secure coding and security awareness sessions.

Mandatory Skills

Application Security

• Secure SDLC
• Threat Modeling (STRIDE)
• Security Architecture Reviews
• Secure Coding Practices

Security Testing

• Vulnerability Assessment
• Penetration Testing
• Manual Web Application Testing
• API Security Testing
• Burp Suite
• OWASP ZAP

Security Tooling

• SAST
• DAST
• SCA
• Code Analysis Tools

Cloud & Platform Security

• AWS / Azure / GCP
• Kubernetes
• Containers
• IAM
• KMS
• Cloud Networking Security

Web & API Security

• OWASP Top 10
• OWASP API Top 10
• Microservices Security

Identity & Access Management

• OAuth2
• OIDC
• RBAC
• SSO
• TLS / mTLS

Scripting

• Python OR Go OR Shell Scripting

Preferred Skills

• OSCP / OSWE / CISSP / CSSLP / CEH
• AI Security
• Security Automation
• SaaS Security
• Product Security
• CI/CD Security
• DevSecOps

Candidate Profile

• 5+ years in Application Security or Product Security.
• Hands-on VAPT experience.
• Experience securing cloud-native applications.
• Strong stakeholder management and communication skills.
• Experience working with product engineering teams.

Interview Process:

Round 1

Technical Security Assessment

Round 2

Application & Product Security Deep Dive

Round 3

Hiring Manager Interview