Senior Product Security Engineer

Senior Application / Product Security EngineerExperience : 7+ Years

Location : Bangalore/Pune

Employment Type : Full-Time

Job Description :

We are looking for a Senior Application / Product Security Engineer with 7+ years of relevant experience in application security, product security, secure software development, cloud security, and container/Kubernetes security.

The candidate should have strong hands-on experience in securing applications and products throughout the Software Development Life Cycle (SDLC) and should be comfortable working with engineering, DevOps, cloud, and product teams.

Mandatory Technical Skills :

Candidates must have hands-on experience in ALL of the following areas :

• Application Security / Product Security / Secure SDLC :

• Strong experience integrating security throughout the Software Development Life Cycle.

• Experience identifying and mitigating application and product security vulnerabilities.

• Secure coding practices, security reviews, vulnerability management, and security testing.

• Threat Modeling & Risk Assessment :

• Hands-on experience performing threat modeling for applications/products.

• Ability to identify security threats, attack vectors, vulnerabilities, and associated risks.

• Experience with security risk assessment and defining appropriate mitigation strategies.

• Azure / AWS Cloud Security :

• Strong hands-on experience securing workloads deployed on Microsoft Azure and/or AWS.

• Knowledge of cloud security architecture, IAM, network security, data protection, security monitoring, and cloud security best practices.

• Experience identifying and mitigating cloud-specific security risks.

• Container & Kubernetes Security :

• Hands-on experience securing Docker/containerized applications and Kubernetes environments.

• Knowledge of container image security, vulnerabilities, runtime security, Kubernetes RBAC, secrets management, network policies, and workload security.

• Experience implementing security controls in containerized environments.

Key Responsibilities :

• Drive application and product security initiatives across the complete SDLC.

• Conduct threat modeling and security risk assessments for applications and products.

• Work closely with development teams to identify and remediate security vulnerabilities.

• Define and implement secure development practices and security controls.

• Assess and improve security of applications deployed on AWS/Azure.

• Review cloud architectures and identify potential security risks.

• Implement and assess security controls for Docker and Kubernetes environments.

• Collaborate with DevOps, Cloud, Engineering, and Product teams to integrate security into CI/CD pipelines.

• Support vulnerability assessment, remediation, and security validation activities.

• Provide security guidance to engineering teams and help establish secure-by-design practices.

• Contribute to security standards, guidelines, and best practices across products and applications.

Mandatory Requirements :

Candidates must meet ALL of the following :

• 7+ years of relevant cybersecurity/application security experience

• Strong experience in Application Security / Product Security / Secure SDLC

• Hands-on experience in Threat Modeling and Risk Assessment

• Hands-on experience in Azure and/or AWS Cloud Security

• Hands-on experience in Container and Kubernetes Security

Profiles missing any one of the above mandatory areas should not be considered.

Preferred Experience :

• DevSecOps / CI/CD security

• SAST / DAST / SCA

• OWASP Top 10

• Vulnerability management

• Security architecture and design reviews

• IAM and secrets management

• Docker security

• Kubernetes security

• Cloud-native security

• Security automation and scripting

Candidate Profile :

The ideal candidate will be a hands-on security professional who can work across Application Security, Product Security, Cloud Security, and Container/Kubernetes Security, rather than someone with experience limited to SOC, network security, or compliance.

Relevant experience matters more than generic cybersecurity experience.