CHENNAI · FULLTIME
Sr Lead Product Security Engineer
ASSA ABLOY
Chennai · onsite · Posted 1d ago
Sourced from
Undisclosed10–12 yrsfulltimeChennai
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.5s
- Found the form on Naukri · 8 questions to answer1.8s
- Decided the answers for all of them2.3s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Job Summary
Roles & Responsibilities
Preferred Qualifications
Experience and/or Education Qualification
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
An Amazing Career Opportunity for Senior Lead Product Security Engineer
Location: Chennai, India (Hybrid)
The Product Vulnerability Management Lead operates the day-to-day product vulnerability management program across a diverse product portfolio. Reporting to the Senior Product Vulnerability Manager, this role turns enterprise standards into consistent execution by product teams, ensuring vulnerabilities are triaged, prioritized, remediated, disclosed, and reported in an auditable manner.
Roles & Responsibilities
- Run vulnerability intake, triage, prioritization, remediation tracking, escalation, and closure processes across assigned product areas.
- Collaborate closely with Information Security, Development, Product Security, Legal, Privacy, and Compliance teams to coordinate vulnerability response activities.
- Assess, triage, prioritize, and coordinate remediation of vulnerabilities identified through SAST, SCA, secret scanning, penetration testing, security assessments, and external researchers.
- Track remediation commitments, validate progress with development teams, monitor SLA compliance, and escalate overdue or at-risk vulnerabilities.
- Lead emergency response or fire-fighting calls for urgent and critical vulnerabilities, bringing together the required stakeholders to define containment, remediation, validation, communication, and closure actions.
- Manage coordinated vulnerability disclosure activities, including external intake, researcher communications, vulnerability validation coordination, and disclosure timelines.
- Maintain vulnerability-management playbooks, operating procedures, exception workflows, risk-acceptance records, and evidence required for audits or customer inquiries.
- Support SBOM-driven response activities for third-party and open-source component vulnerabilities.
- Develop practical guidance and training that enable product teams to independently execute their vulnerability-management responsibilities.
- Produce clear operational and executive reporting on risk posture, remediation performance, disclosure activity, and program improvements.
- Identify gaps in adoption or process effectiveness and recommend scalable improvements.
Preferred Qualifications
- Familiarity with SBOMs, software supply-chain vulnerabilities, and open-source component governance.
- Experience in a large, multi-product or regulated environment.
- Relevant certifications such as CISSP, CSSLP, GIAC, or comparable credentials.
Experience and/or Education Qualification
- 10-12 years of experience in product security, application security, PSIRT, vulnerability management, or a related security discipline.
- Demonstrated experience managing the end-to-end vulnerability lifecycle in a software or connected-product environment.
- Experience with application security capabilities and vulnerability sources, including SAST, SCA, secret scanning, penetration testing, and secure handling of credentials and secrets in development and CI/CD environments.
- Experience coordinating or participating in penetration testing, including reviewing findings, validating impact, and driving remediation.
- Strong understanding of vulnerability severity, CVSS, remediation prioritization, common application-security vulnerabilities, and secure software development practices.
- Experience coordinating response for urgent or critical security vulnerabilities under tight timelines.
- Experience with coordinated vulnerability disclosure or PSIRT operations.
- Ability to work effectively with distributed engineering teams and influence action without direct authority.
- Strong written and verbal communication skills, including the ability to communicate technical risk clearly to non-technical stakeholders.
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Section · 02
Skills
VulnerabilityauditscisspsastCloud EngineerSLAproduct securitytriagecloudApplication SecurityPenetration TestingCommunication SkillsInformation SecurityoperationsSoftware DevelopmentLegalcomplianceTelecom
Section · Company
About ASSA ABLOY
ASSA ABLOY
Real Estate
175
employees
2005
21 years old
Stockholm,Stockholm County
Sweden
₹12.9L PA avg
Avg at ASSA ABLOY
About
ASSA ABLOY helps billions of people move through a safer, more open world with ease at home, at work, at leisure, and on the go.
Industries
Real EstateBuilding MaterialInternet
Employee ratings
10 reviews
3.3/ 5
Culture
2.0
Career growth
2.4
Work-life
2.9
Employees rate it well for
Work-Life Balance35Job Security33
Find them on