8+ YOE Lead Product Security Engineer - 1B

Quest Global; Bengaluru; On-site; INR 4,500,000 - 6,000,000; Full time

Job summary

Quest Global is seeking a Lead Product Security Engineer to drive SSDLC security for medical products. You will collaborate with software architects, development teams, DevOps, QA, and product management to embed secure design and verification throughout the lifecycle.

The ideal candidate has 8+ years in product security or secure SDLC, strong threat modeling skills (STRIDE, PASTA, MITRE ATT&CK), and hands-on experience with SAST/DAST/SCA tools, SBOMs, and risk assessment.

Qualifications

• 8+ years of experience in Product Security, Application Security or Secure Software Development.
• Strong experience with Threat Modeling methodologies (STRIDE, PASTA, MITRE ATT&CK).
• Experience with SAST, DAST and SCA tools.
• Strong understanding of Secure Design Principles and Secure Software Development Lifecycle.
• Experience in Vulnerability Management and Security Risk Assessment.

Responsibilities

• Perform Threat Modeling using STRIDE, PASTA, MITRE ATT&CK and similar methodologies.
• Conduct Security Architecture Reviews and recommend Secure-by-Design solutions.
• Define and review Product Security requirements during software development.
• Perform security assessments using SAST, DAST and Software Composition Analysis (SCA) tools.
• Drive vulnerability triage, risk assessment, remediation tracking and security verification.
• Review SBOMs and monitor third-party software risks using industry-standard tools.
• Collaborate with architects and engineering teams to implement secure coding and security best practices.
• Support cloud-native and container-based product security initiatives (Optional)
• Work with cross-functional teams to evaluate security risks and identify practical compensating controls for legacy products.
• Provide technical guidance on cryptography, IAM, network security and secure communications.
• Participate in security roadmap planning and product security governance.

Skills

Threat Modeling

SAST/DAST/SCA

Secure SDLC

SBOM & Supply Chain

Cryptography & IAM

Security Architecture

Vulnerability Management

Cloud & DevSecOps

Cross-functional Communication

Tools

SAST Tools

DAST Tools

SCA Tools

Job description

Job Requirements

As a Lead Product Security Engineer, you will be responsible for driving Product Security activities throughout the Secure Software Development Lifecycle (SSDLC), working closely with Software Architects, Development teams, DevOps, Quality Engineering, and Product Management to build secure medical products.

Job Requirements

As a Lead Product Security Engineer, you will be responsible for driving Product Security activities throughout the Secure Software Development Lifecycle (SSDLC), working closely with Software Architects, Development teams, DevOps, Quality Engineering, and Product Management to build secure medical products.

This role requires a strong technical background in Product Security, Application Security, Security Architecture, Threat Modeling, DevSecOps, and Vulnerability Management.

Responsibilities

Work Experience

• Perform Threat Modeling using STRIDE, PASTA, MITRE ATT&CK and similar methodologies.
• Conduct Security Architecture Reviews and recommend Secure-by-Design solutions.
• Define and review Product Security requirements during software development.
• Perform security assessments using SAST, DAST and Software Composition Analysis (SCA) tools.
• Drive vulnerability triage, risk assessment, remediation tracking and security verification.
• Review SBOMs and monitor third-party software risks using industry-standard tools.
• Collaborate with architects and engineering teams to implement secure coding and security best practices.
• Support cloud-native and container-based product security initiatives (Optional)
• Work with cross-functional teams to evaluate security risks and identify practical compensating controls for legacy products.
• Provide technical guidance on cryptography, IAM, network security and secure communications.
• Participate in security roadmap planning and product security governance.

Required Qualifications

• 8+ years of experience in Product Security, Application Security or Secure Software Development.
• Strong experience with Threat Modeling methodologies (STRIDE, PASTA, MITRE ATT&CK).
• Experience with SAST, DAST and SCA tools.
• Strong understanding of Secure Design Principles and Secure Software Development Lifecycle.
• Experience in Vulnerability Management and Security Risk Assessment.
• Knowledge of Software Bill of Materials (SBOM) and Supply Chain Security.
• Strong understanding of Cryptography, Identity & Access Management and Network Security.
• Experience working with software architects and development teams.
• Excellent analytical and communication skills.