Senior Security Engineer / Lead (Product Security / Application Security)
A senior/lead application security engineer at OneSpan (Noida, India) who runs appsec assessments, secure code reviews, threat modeling, and product pen tests, triages SAST/DAST/SCA findings, and integrates security into CI/CD — while building AI agents and LLM-powered automation to drive a shift-left security culture.
- Compensation
- Not disclosed
- Location
- Noida
- Work setup
- Not specified
- Seniority
- Lead
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in computer science, cybersecurity, software engineering, or related field, or equivalent practical experience
- Experience in application security, cloud security, penetration testing, or secure software development
- Strong understanding of common application vulnerabilities (OWASP Top 10, CWE) and secure coding practices
- Familiarity with security testing tools and methodologies, including SAST, DAST, SCA, and penetration testing
- Knowledge of modern software development practices, CI/CD pipelines, and cloud environments
- Strong analytical and problem-solving skills
- Craftsman mindset
- Excellent communication skills with the ability to work effectively across technical and non-technical teams
- Experience in application security, mobile security, reverse engineering, or penetration testing
- Experience with scripting or programming
Nice to have
- Relevant security certifications such as OSCP, OSWE, SANS GPEN, CISSP or similar
- Experience with cloud platforms such as AWS, Azure, or GCP
- AI/ML security knowledge
- Knowledge of cryptography, mobile security, authentication, identity management, and secure architecture principles
- Experience working in regulated environments or security-focused organizations
Full description
At OneSpan, we specialize in digital identity and anti-fraud solutions that create exceptional and secure experiences.
We are looking for a Senior Security Engineer / Lead (Product Security / Application Security) to join our team in Noida.
At OneSpan, we are embracing the AI transformation to accelerate innovation and productivity across the company. As part of the Security Competence Center (SCC), you will work closely with engineering, product, and business teams to ensure AI is adopted safely, responsibly, and effectively while continuously improving the security of our products and development processes.
The role in 1 sentence: You will help drive our transformation by building AI agents and automation solutions, enabling teams to deliver more, move faster, and innovate securely through a strong shift-left security mindset.
Key Responsibilities
- Conduct application security assessments, including secure code reviews and security testing.
- Secure and Develop AI-powered workflows using LLMs, agent frameworks, orchestration platforms, and enterprise integrations.
- Perform threat modeling activities and support development teams in mitigating identified risks.
- Perform penetration tests on our product before they are publicly released.
- Manage and triage vulnerabilities discovered through SAST, DAST, SCA, penetration tests, and cloud security assessments.
- Collaborate with engineering teams to integrate security controls into CI/CD pipelines and development workflows.
- Support incident response investigations related to product security issues.
- Contribute to the definition and maintenance of security standards, policies, and secure development guidelines.
- Provide security guidance and training to developers and Security Champions.
- Evaluate and recommend security tools, technologies, and processes to improve product security maturity.
- Ensure our products follow all the regulations that apply.
- Track security metrics, risks, and remediation efforts across products and services.
Qualifications
- Bachelor's degree in computer science, Cybersecurity, Software Engineering, or a related field, or equivalent practical experience.
- Experience in application security, cloud security, penetration testing, or secure software development.
- Strong understanding of common application vulnerabilities (OWASP Top 10, CWE) and secure coding practices.
- Familiarity with security testing tools and methodologies, including SAST, DAST, SCA, and penetration testing.