Senior Security Engineer - Product Security
EGC Global Services · Bengaluru · onsite · Posted 28d ago
Undisclosed6–8 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Overview
Ecolabs Information Security team is seeking a Senior Security Engineer with strong expertise in Product Security to lead and enhance secure software development practices across the organization. This role focuses on integrating security into the Software Development Lifecycle (SDLC), identifying and mitigating application vulnerabilities, and guiding development teams on secure coding and architecture. The ideal candidate will have hands-on experience in application security, penetration testing, secure code reviews, and AI/LLM security.
Minimum Qualification
- Bachelors degree in computer science, information technology or related discipline.
- 6 - 8 years of experience in the Product Security domain.
Roles and Responsibilities
- Conduct Product Security Risk Assessments for Mobile, Web, API, and IoT applications.
- Perform and remediate findings from SAST, DAST, and manual penetration testing.
- Simulate attacks and generate detailed vulnerability reports.
- Collaborate with internal teams for automated and manual security testing.
- Review software applications for potential security flaws.
- Guide engineering teams on secure development practices and remediation strategies.
- Deliver secure coding training to development and engineering teams.
- Perform secure source code reviews and recommend mitigation strategies.
- Act as a technical liaison for CI/CD and DevSecOps integration.
- Automate security processes and integrate them into development pipelines.
- Stay updated on emerging threats, vulnerabilities, and countermeasures.
- Build and maintain strong relationships with stakeholders and business partners.
Technical Skills Expertise
- Strong expertise in OWASP Top 10, CWE Top 25, and data protection principles.
- Solid understanding of application architecture in multi-cloud and hybrid environments.
- Hands-on experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Container Security, and manual penetration testing.
- Proficiency in interpreting and writing code in Python, JavaScript/TypeScript, Java, C# (.NET), and Apex.
- Deep knowledge of software vulnerabilities, secure design patterns, and threat mitigation strategies.
- Experience integrating security into CI/CD pipelines and Developers workflows.
- Strong working knowledge of Web Application Firewall (WAF) technologies
- Knowledge on OWASP Top 10 for LLMs and emerging AI security frameworks.
- Understanding of Prompt Injection, Data Poisoning, and Model Theft threats.
- Experience securing AI APIs, ML pipelines, and LLM-based applications.
- Knowledge of API Security, Infrastructure as Code (IaC) Security, and Secrets Management.
- Experience in Threat Modelling and Attack Simulation techniques
Security Tools Technologies
- Web Application Firewalls (WAF): Fastly, Cloudflare, Akamai
- Tools: Snyk, Qualys, Burp Suite, Wiz, Postman, MobSF, Elastic, Agentic Scanner
- Cloud: Azure, AWS, GCP
- SCM: ADO, GitHub
Sourced from naukri
Skills
Design PatternsCI/CD Pipelinesapisapi securityamazon web servicesdata protectionapplication architecturecontainer securityBurp Suitedastai securityCloudflareContainerakamaiApexcloudApplication SecurityArchitectureMicrosoft AzureArtificial Intelligence
About EGC Global Services
EGC Global Services
Accounting & Auditing
Kochi, Kerala
India
₹6.5L PA avg
Avg at EGC Global Services
About
Founded in 2021, EGC Global Services India Private Limited (EGCGS) is a wholly owned subsidiary of EWIE Group of Companies LLC (EGC). As part of the EGC family, we are proud to be associated with our group companies – EWIE, PSMI, SourcePro, EGC Supply, GSNS. Our parent company, EGC, is headquartered in Ann Arbor Michigan, USA, and is the 27th largest industrial distribution firm in the world.With a presence in 16 countries supporting 250+ programs, EGC is considered a leader in the adoption of new practices and technology solutions that provide value to customers and lead to substantial cost savings. Our division was incorporated in 2021 at Kochi, Kerala India, with a primary focus on being the shared support center for our group companies across Technology, Procure-to-pay, Order-to-cash, E-commerce and Master Data Management Processes.
Industries
Accounting & Auditing
Employee ratings
10 reviews
3.1/ 5
Culture
2.7
Career growth
2.5
Work-life
2.5
Employees rate it well for
Compensation & Benefits32Work Satisfaction31
Find them on