This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Product Security Engineer based in India.
Join a remote-first security team dedicated to helping organizations identify and address vulnerabilities before they become serious threats. As a Product Security Engineer, you will work closely with engineering, product, and DevOps teams to embed security into the entire software development lifecycle. You will help design secure-by-default solutions, strengthen application security practices, and build automation that prevents entire classes of vulnerabilities. Through threat modeling, code reviews, and security tooling, you will improve protection while enabling teams to innovate and deliver quickly. This role offers the opportunity to take ownership of impactful security projects, influence technical roadmaps, and turn security insights into measurable improvements. You will thrive in a collaborative, fast-paced environment that values initiative, continuous learning, and diverse perspectives.
Accountabilities
- Collaborate with Engineering and Product: Partner with engineering teams to review architecture, assess new features, identify security risks, and prioritize improvements without unnecessarily slowing development.
- Build Secure-by-Default Solutions: Develop and improve secure libraries, reusable components, and standardized development practices that prevent recurring vulnerabilities at scale.
- Strengthen Application Security: Configure, optimize, and maintain security tools, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and secrets scanning, to improve detection and reduce false positives.
- Lead Security Projects: Manage cross-functional initiatives from initial scoping through implementation, influencing engineering and product roadmaps while communicating technical risks and recommendations to diverse stakeholders.
- Automate Security Operations: Develop scripts, tools, and automated workflows that expand security coverage, reduce repetitive tasks, and improve the efficiency of security processes.
- Support Continuous Improvement: Apply feedback and lessons learned to refine security practices, evaluate emerging tools, and promote measurable security outcomes.
- Champion Security Research: Participate in the organization's vulnerability discovery and bug bounty ecosystem, testing new approaches and sharing insights that can improve platform security and product capabilities.
- Promote Security Awareness: Help engineering teams adopt secure development practices and integrate security considerations into everyday technical decisions.
Requirements
- Professional Experience: At least 3 years of experience in product security, application security, or secure software development, with practical experience securing modern applications.
- Programming and Automation: Proficiency in at least one modern programming language, such as Python, Go, Ruby, or Java, with the ability to review code, automate tasks, and build security tools.
- Application Security Expertise: Hands-on experience with threat modeling, secure code reviews, and automated security testing, along with a strong understanding of common vulnerabilities, including the OWASP Top 10.
- Security Tooling: Familiarity with SAST, DAST, SCA, and secrets-scanning solutions, including the ability to improve their effectiveness and integrate them into development workflows.
- Project and Stakeholder Management: Demonstrated ability to lead initiatives, communicate security risks clearly, and influence cross-functional teams across Engineering, DevOps, and Product.
- Education: A bachelor's degree in Engineering, Computer Science, or a related discipline, or equivalent practical experience.
- Cloud Security (Preferred): Experience securing cloud-native environments and Infrastructure as Code, including technologies such as Terraform, AWS, GCP, Kubernetes, or Docker.
- Bug Bounty Experience (Preferred): Familiarity with bug bounty programs, vulnerability disclosure processes, or offensive security practices.
- Secure Development Enablement (Preferred): Experience building reusable security libraries, standardized workflows, or secure-by-default development solutions that eliminate entire categories of vulnerabilities.
- Adaptability and Communication: A proactive, analytical mindset, strong problem-solving abilities, and the capacity to work effectively in a fast-paced, collaborative, remote environment.
- Industry Experience (Preferred): Previous experience in a growing cybersecurity, technology, or SaaS organization is an advantage.
Benefits
- Remote Work: Work from home full-time while collaborating with a distributed team.
- Meaningful Impact: Contribute to improving software security and helping organizations prevent real-world cyber threats.
- Professional Growth: Gain opportunities to expand your application security expertise, experiment with new tools, and influence security engineering practices.
- Ownership and Autonomy: Lead projects from concept to implementation and contribute directly to technical and strategic decisions.
- Collaborative Culture: Work alongside colleagues with diverse backgrounds and perspectives in an environment that values teamwork, inclusion, and shared learning.
- Inclusive Workplace: Equal employment opportunities and reasonable accommodations throughout the recruitment process.
- Compensation: Salary details were not specified in the original job description and may be discussed during the recruitment process.
- Additional Conditions: Employment may be subject to background checks due to access to confidential and proprietary information.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
