Product Security Engineer

Role - Product Security Engineer

Location - Chennai
Work Model - Work in Office

About Quvia:

Quvia is building the digital fabric between edge and cloud. Our platform uses AI and machine learning to orchestrate connectivity across satellite, terrestrial, and hybrid networks so customers can move and manage data in the world's most network constrained environments.

We partner with global leaders in aviation, maritime, energy and other industries where connectivity is variable and complex, and digital services depend on reliable data movement. As companies deploy AI, automation and data-driven systems at the edge, Quvia provides the platform needed to unlock the full potential of their data and build value above the network.

Quvia is a fast growing, Series A company backed by Colombia Capital ($5B+ in fund commitments. It is headquartered in the greater Miami area with offices in the UK and India.

Learn more at and.

About the Role

We're seeking a Product Security Engineer to play a critical part in building and evolving Quvia’s security posture across our products' entire lifecycle. In this highly impactful role, you’ll partner with product management, engineering, and operations teams to assess product risks, define secure development standards, enforce security policies, and implement best practices to protect our products and, by extension, our customers' data and operations.

This is a hands-on role requiring a deep understanding of secure software development, application security frameworks, and cloud-native product architectures, with a strong emphasis on vulnerability mitigation and secure design principles. If you're a strategic thinker with a passion for building intrinsically secure products and a knack for embedding security into the DNA of software development, we encourage you to apply.

What You'll Do:

• Security Architecture & Design Review: Collaborate with product and engineering teams to review designs and architectures for new features and products, identifying potential security risks and recommending appropriate controls and mitigations.

• Threat Modeling: Conduct threat modeling exercises for applications and systems to proactively identify and address potential security weaknesses.

• Security Code Review: Perform manual and automated security code reviews to identify vulnerabilities such as OWASP Top 10, common weaknesses (CWEs), and other security flaws.

• Vulnerability Management: Participate in the vulnerability management process, including triage, prioritization, and tracking of vulnerabilities identified through various sources (e.g., pen tests, bug bounties, internal scans).