Sr. Product Security Engineer

Job Title: Senior Product Security Engineer

Experience Required: 5-7 years

Location: Pune, India

Job Type: Full-time 

Driven by transformative digital technologies and trends, here at RIB we’ve made it our primary purpose to propel the industry forward and make engineering and construction more efficient and sustainable. 

Managing the entire building lifecycle from planning to construction, the development of our powerful portfolio of software solutions is driven by industry expertise, best practice and a passion to remain at the cutting edge of technology. Ultimately, connecting people, processes and data in innovative ways to ensure customers always complete projects within budget, on time and to quality, while reducing their carbon footprint. 

RIB Software is a proud member of Schneider Electric. 

Job Summary: 

 
As a Product Security Manager you will own operational security for assigned RIB Software products, executing secure development lifecycle (SDL) requirements and ensuring compliance through coordinated security reviews and assessments. Serves as the primary security point of contact for product teams while collecting evidence required for compliance. 
 

This role requires a blend of hands-on technical expertise, security leadership, and the ability to work collaboratively across multidisciplinary teams including Security Architects, Product Owners, Developers, Quality Engineers, DevOps, Security Operations, and Governance. You will be a key driver in our mission to embed security into every stage of our products’ lifecycles, from initial design through to decommissioning and end-of-life. 

This role operates in RIB's AI-augmented product security environment, you will be expected to incorporate AI tools into your security workflows, critically evaluate AI-generated outputs, and help embed AI-fluency practices within SDLC of the product teams. 

This role requires comfort and curiosity about working alongside AI tools. You don’t need experience with specific tools – but you must have experience incorporating AI tools into your workflow. Whether used for writing, research, coding, design, or analysis, you’ve formed your own view on when AI adds value and when it doesn’t, and you can describe how you’ve adapted how you work as a result. You review AI output critically before accepting it. 

Key Responsibilities: 

• Execute SDL requirements across the full product development lifecycle. 

• Drive regular threat modelling, security reviews, and risk assessments for assigned products. 

• Track and manage product-specific security issues through resolution, communicating status to leadership. 

• Manage supply chain security risks for externally provided components used within the product. 

• Collect and maintain compliance evidence for compliance requirements. 

• Coordinate security activities with development teams through Security Architects and Product Owners in collaboration with our Vulnerability Assessment and Penetration Testing team. 

• Identify and refine security requirements applicable to the product across its lifecycle. 

• Serve as primary contact for customer security discussions, assessments, and vulnerability disclosure. 

• Support security training and assessment initiatives to ensure product teams have demonstrated security expertise. 

• Mentor assigned Product Security Engineers through collaborative review and guidance (when PSE support is available). 

• Contribute to the security architecture and roadmap by advising on evolving threats and new technologies. 

• Leverage AI tools to accelerate security reviews, threat modelling, and vulnerability analysis and critically assess AI-generated outputs before accepting results. 

• Assess AI-specific security risks in products that integrate LLMs, generative AI features, or AI-powered components (e.g., prompt injection, model data leakage, non-deterministic output handling). 

• Empower the team's use of AI by sharing knowledge of effective human-AI collaboration practices in product development and security workflows. 

Qualifications and Experience: 

• 5+ years experience in product security or application security. 

• Strong understanding of SDL processes and security compliance frameworks. 

• Proven ability to conduct security testing using SAST, DAST, and SCA tools. 

• Familiarity with one or more of C#, Typescript, Java, JavaScript, Dart, C++, Python, and/or Delphi 

• Experience with vulnerability management and risk assessment. 

• Excellent communication skills for technical and business stakeholders. 

• Project management experience with cross-functional teams. 

• Ability to drive improvements in security culture. 

• Demonstrated ability to work independently and provide guidance to technical colleagues. 

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent professional experience. 

 
Preferred Qualifications: 
 

• CSSLP or similar secure development certification 

• Familiarity with cloud security best practices (preferably Azure) 

• Experience with enterprise software security frameworks (SOC 2, ISO 27001) 

• Experience with product or cloud security architecture 

• Background in SaaS or enterprise software environments 

• Hands-on experience evaluating security risks specific to AI/ML-integrated products (e.g., OWASP LLM Top 10, prompt injection, model supply chain risks). 

• Familiarity with using AI-assisted security tooling (e.g., AI-powered SAST, vulnerability triage tools, or LLM-based code review assistants). 

Reports To: Product Security Lead 

We offer a competitive salary and benefits package, as well as opportunities for professional growth and development. If you are a motivated self-starter with a passion for application security, we encourage you to apply for this exciting opportunity.