Product Security Engineer II
Akraya · Bengaluru · hybrid · Posted 44d ago
About a minute. You'll make an account on the way through.
About this role
Hiring Women Returner
Product Security Engineer II
Location - Bangalore (Hybrid)
Experience - 5-10 Years
Employment Type - Full-Time
Job Summary
We are looking for an experienced Product Security Engineer with expertise in application security, penetration testing, cloud security, threat modeling, and Secure SDLC practices. The ideal candidate should have hands-on experience securing modern cloud-native applications and distributed systems.
Key Responsibilities
- Conduct application and product security assessments.
- Perform vulnerability assessments and penetration testing.
- Drive threat modeling activities using STRIDE or similar methodologies.
- Review architecture and security designs.
- Execute manual web and API security testing.
- Integrate and optimize SAST, DAST, and SCA tools.
- Secure Kubernetes, containers, and cloud-native workloads.
- Collaborate with development teams to remediate vulnerabilities.
- Develop security automation using scripting and tooling.
- Conduct secure coding and security awareness sessions.
Mandatory Skills
Application Security
- Secure SDLC
- Threat Modeling (STRIDE)
- Security Architecture Reviews
- Secure Coding Practices
Security Testing
- Vulnerability Assessment
- Penetration Testing
- Manual Web Application Testing
- API Security Testing
- Burp Suite
- OWASP ZAP
Security Tooling
- SAST
- DAST
- SCA
- Code Analysis Tools
Cloud & Platform Security
- AWS / Azure / GCP
- Kubernetes
- Containers
- IAM
- KMS
- Cloud Networking Security
Web & API Security
- OWASP Top 10
- OWASP API Top 10
- Microservices Security
Identity & Access Management
- OAuth2
- OIDC
- RBAC
- SSO
- TLS / mTLS
Scripting
- Python OR Go OR Shell Scripting
Preferred Skills
- OSCP / OSWE / CISSP / CSSLP / CEH
- AI Security
- Security Automation
- SaaS Security
- Product Security
- CI/CD Security
- DevSecOps
Candidate Profile
- 5+ years in Application Security or Product Security.
- Hands-on VAPT experience.
- Experience securing cloud-native applications.
- Strong stakeholder management and communication skills.
- Experience working with product engineering teams.
Interview Process:
Round 1
Technical Security Assessment
Round 2
Application & Product Security Deep Dive
Round 3
Hiring Manager Interview
Sourced from naukri